Multiple Choice
After discovering a security incident and removing the affected files, an administrator disabled an unneeded service that led to the breach. Which of the following steps in the incident response process has the administrator just completed?
A) Containment
B) Eradication
C) Recovery
D) Identification
Correct Answer:
Verified
Correct Answer:
Verified
Q1000: An organization requires secure configuration baselines for
Q1001: Which of the following provides the ability
Q1002: During a lessons learned meeting regarding a
Q1003: The IT department needs to prevent users
Q1004: Which of the following would allow for
Q1006: An attacker is able to capture the
Q1007: A database backup schedule consists of weekly
Q1008: An application developer is working on a
Q1009: To reduce disk consumption, an organization's legal
Q1010: A junior systems administrator noticed that one