Which of the following is MOST important to complete during the recovery phase of an incident response process before bringing affected systems back online?

Question

Marco Morsiani · Accepted Answer

Test and verify that compromisedsystems are clean.

Marco Morsiani · Answer

Record and close security incident tickets.

Marco Morsiani · Answer

Document recovery steps for senior management reporting.

Marco Morsiani · Answer

Capture and preserve forensic images of affected systems.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 658 - CISM discussion

Suggested answer: B

0 comments