Comprehensive and Detailed Explanation (ECIH-aligned):
The primary objective of endpoint incident handling, as outlined in the ECIH curriculum, is rapid containment and eradication of threats to preserve business operations. Advanced malware that bypasses traditional defenses requires coordinated response capabilities to prevent widespread compromise.
Option D is correct because endpoint IH&R enables organizations to quickly isolate infected systems, remove malicious components, and restore trusted states, thereby maintaining operational continuity. ECIH emphasizes speed and coordination as critical success factors in endpoint response.
Option A is secondary. Option B is a compliance outcome, not a response objective. Option C is a consequence, not the primary driver.
Therefore, the most critical reason is to ensure rapid containment and eradication, making Option D correct.