Multiple Choice
An incident involving a workstation that is potentially infected with a virus has occurred. The workstation may have sent confidential data to an unknown internet server. Which of the following should a security analyst do FIRST?
A) Make a copy of everything in memory on the workstation.
B) Turn off the workstation.
C) Consult information security policy.
D) Run a virus scan.
Correct Answer:
Verified
Correct Answer:
Verified
Q771: A user typically works remotely over the
Q772: While reviewing the monthly internet usage it
Q773: A security analyst is implementing mobile device
Q774: A security professional wants to test a
Q775: A security analyst is diagnosing an incident
Q777: After attempting to harden a web server,
Q778: A security program manager wants to actively
Q779: A security administrator has replaced the firewall
Q780: Before an infection was detected, several of
Q781: Which of the following should a technician