During an incident, some IoCs of possible ransomware contamination were found in a group of servers in a segment of the network. Which of the following steps should be taken next?
Isolation: The immediate priority when dealing with ransomware (or potential ransomware) is to contain the threat to prevent it from spreading further within the network. Isolating the affected servers helps to stop the ransomware from propagating to other systems and limits the damage. This step involves disconnecting the infected servers from the network to halt communication and encryption activities.
In this situation, the best solution would be to isolate first before anything else.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CS0-003 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Chiniwini
Highly Voted 8 months, 3 weeks agoRobuste7
Most Recent 2 weeks ago