16d • 🙋♂️ CISSP
CISSP Practice Question (Domain 7: Security Operations)
Ransomware hits a file server mid product launch, and the sales VP wants last night's backup restored within the hour. Nobody has invoked the incident response plan. What should the security operations manager do FIRST?
A. Restore the server from backup to protect the launch
B. Isolate the server and preserve volatile evidence
C. Declare the incident and activate the response plan
D. Scan neighboring hosts to gauge how far it spread
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
0
13 comments
CISSP Practice Question (Domain 7: Security Operations)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+32
2
+23
3
+22
4
+17
5
+14
Powered by