← Security+ glossary

Automation and incident response

Containment and eradication

Containment is stopping the spread of an incident, for example by isolating an infected computer from the network so the attack does not reach other systems. Eradication is removing the cause itself, for example by deleting the malware, closing the vulnerability and removing the attacker's access.

All Security+ guides →

Related terms

Get CertOwl on the App Store

Free download · A+ and Network+ completely free
+ daily lessons, flashcards and full exam simulations