This is another name for the demilitarized zone (DMZ) of a network.
"Three legged firewall" is incorrect. While a DMZ can be implemented on one leg of such a device,
this is not the best answer.
"A place to attract hackers" is incorrect. The DMZ is a way to provide limited public access to an
organization's internal resources (DNS, EMAIL, public web, etc) not as an attractant for hackers.
"Bastion host" is incorrect. A bastion host serves as a gateway between trusted and untrusted network.
References: CBK, p. 434 AIO3, pp. 495 - 496

According to the CISSP Common Body of Knowledge (CBK), there is no specific minimum frequency stipulated for testing a disaster recovery plan (DRP). However, it is recommended that DRPs should be tested regularly to ensure that they are effective and up-to-date. The frequency of testing should be based on the organization's business requirements, the stability of the environment, and the advice of the information security manager.
There are several industry standards and regulations that provide guidance on DRP testing frequency. For example, the National Institute of Standards and Technology (NIST) recommends that DRPs should be tested at least annually. The Payment Card Industry Data Security Standard (PCI DSS) requires annual testing of DRPs as well. However, these are only recommendations and actual testing frequency may vary depending on the organization's needs and risk appetite.

Explanation/Reference:
Explanation:
The primary goal of incident handling is to contain, eradicate, and recovery from the incident. See step 3 below.
Note: The Incident Handling lifecycle can be divided into the following four steps:
1. Preparation
2. Detection and Analysis
3. Containment, Eradication, and Recovery
4. Post-incident Activity
Incorrect Answers:
A: Retrieving evidence to prosecute is not part of Incident Handling.
B: Preparation is part of incident handling lifecycle, but it is not the most important goal.
C: Improving the disaster recovery plan is not a goal of incident handling.
References:
Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham,
2012, p. 331

Detective Physical Controls would use the following: motion detectors, closed circuit TV, sensors, and alarms.