Multiple Choice
Security administrators attempted corrective action after a phishing attack. Users are still experiencing trouble logging in, as well as an increase in account lockouts. Users' email contacts are complaining of an increase in spam and social networking requests. Due to the large number of affected accounts, remediation must be accomplished quickly. Which of the following actions should be taken FIRST? (Select TWO)
A) Disable the compromised accounts
B) Update WAF rules to block social networks
C) Remove the compromised accounts with all AD groups
D) Change the compromised accounts' passwords
E) Disable the open relay on the email server
F) Enable sender policy framework
Correct Answer:
Verified
Correct Answer:
Verified
Q1104: Which of the following is the summary
Q1105: Security administrators attempted corrective action after a
Q1106: A forensic expert is given a hard
Q1107: While reviewing system logs, a security analyst
Q1108: A root cause analysis reveals that a
Q1110: A security administrator wants to implement least
Q1111: A security administrator has received multiple calls
Q1112: Which of the following strategies should a
Q1113: A company hires a third-party firm to
Q1114: A security administrator is developing controls for