CertNexus Exam CFR-410 Topic 4 Question 28 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 28
Topic #: 4

[All CFR-410 Questions]

During an incident, the following actions have been taken:

- Executing the malware in a sandbox environment

- Reverse engineering the malware

- Conducting a behavior analysis

Based on the steps presented, which of the following incident handling processes has been taken?

AContainment

BEradication

CRecovery

DIdentification

Show Suggested Answer

Suggested Answer: A

The ''Containment, eradication and recovery'' phase is the period in which incident response team tries to contain the incident and, if necessary, recover from it (restore any affected resources, data and/or processes).

by Judy at Feb 10, 2024, 03:08 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gianna

5 months ago

I agree with Jacquelyne. Executing the malware in a sandbox is more towards identifying it.

upvoted 0 times

...

Jacquelyne

5 months ago

I think it could be a combination of identification and eradication.

upvoted 0 times

...

Jodi

6 months ago

I disagree, I believe it's more of a containment process.

upvoted 0 times

...

Phyliss

7 months ago

I think the actions taken are part of the identification process.

upvoted 0 times

...