Multiple Choice
An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?
A) Capture and document necessary information to assist in the response.
B) Request the user capture and provide a screenshot or recording of the symptoms.
C) Use a remote desktop client to collect and analyze the malware in real time.
D) Ask the user to back up files for later recovery.
Correct Answer:

Verified
Correct Answer:
Verified
Q520: A user is unable to open a
Q521: A systems administrator has installed a new
Q522: An attacker has obtained the user ID
Q523: The IT department is deploying new computers.
Q524: A security analyst is hardening a WiFi
Q526: A security engineer wants to implement a
Q527: A security analyst is asked to check
Q528: A security engineer must install the same
Q529: A staff member contacts the help desk
Q530: Which of the following should be used