ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 40 - 212-82 discussion

Report
Export

Warren, a member of IH&R team at an organization, was tasked with handling a malware attack launched on one of servers connected to the organization's network. He immediately implemented appropriate measures to stop the infection from spreading to other organizational assets and to prevent further damage to the organization.

Identify the IH&R step performed by Warren in the above scenario.

A.
Containment
Answers
A.
Containment
B.
Recovery
Answers
B.
Recovery
C.
Eradication
Answers
C.
Eradication
D.
Incident triage
Answers
D.
Incident triage
Suggested answer: A

Explanation:

Containment is the IH&R step performed by Warren in the above scenario. IH&R (Incident Handling and Response) is a process that involves identifying, analyzing, containing, eradicating, recovering from, and reporting on security incidents that affect an organization's network or system. Containment is the IH&R step that involves implementing appropriate measures to stop the infection from spreading to other organizational assets and to prevent further damage to the organization. Containment can be done by isolating the affected system or network, blocking malicious traffic or communication, disabling or removing malicious accounts or processes, etc. Recovery is the IH&R step that involves restoring the normal operation of the system or network after eradicating the incident. Eradication is the IH&R step that involves removing all traces of the incident from the system or network, such as malware, backdoors, compromised files, etc. Incident triage is the IH&R step that involves prioritizing incidents based on their severity, impact, and urgency.

asked 18/09/2024
I Haq
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first