ExamGecko
Question list
Search
Search

Related questions











Question 590 - CISA discussion

Report
Export

An incident response team has been notified of a virus outbreak in a network subnet. Which of the following should be the NEXT step?

A.
Verify that the compromised systems are fully functional
Answers
A.
Verify that the compromised systems are fully functional
B.
Focus on limiting the damage
Answers
B.
Focus on limiting the damage
C.
Document the incident
Answers
C.
Document the incident
D.
Remove and restore the affected systems
Answers
D.
Remove and restore the affected systems
Suggested answer: B

Explanation:

An incident response team has been notified of a virus outbreak in a network subnet. The next step should be to focus on limiting the damage by containing the virus and preventing it from spreading further. This may involve isolating the affected systems, disconnecting them from the network, blocking malicious traffic or applying patches or antivirus updates. Verifying that the compromised systems are fully functional, documenting the incident and removing and restoring the affected systems are possible steps that could be taken after limiting the damage.Reference:

: [Incident Response Definition]

: [Incident Response Process | ISACA]

: [Virus Definition]

asked 18/09/2024
Innos Phoku
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first