Logical Operations Exam CFR-210 Topic 8 Question 57 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 57
Topic #: 8

As part of an incident response effort, data has been collected and analyzed, and a malware infection has been contained. Which of the following is the NEXT step the incident response team should take within the incident response process?

ABegin recovering all infected systems to return the organization to normal operations as soon as possible.

BEnsure every instance of the malware has been removed across the organization.

CDiscuss lessons learned before proceeding with other steps.

DStart writing the report to ensure a quality product is delivered by the end of the project.

Show Suggested Answer

Suggested Answer: B

by Benton at Feb 08, 2024, 06:26 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eliz

8 months ago

That makes sense, Lashawn. We need to fully contain the malware before finalizing our incident response process.

upvoted 0 times

...

Lashawn

8 months ago

I think we should ensure every instance of the malware has been removed before moving on to other steps.

upvoted 0 times

...

Eliz

8 months ago

I understand your point, Regenia. But we need to make sure we learn from this incident to prevent future ones.

upvoted 0 times

...

Regenia

8 months ago

But shouldn't we start recovering all infected systems first?

upvoted 0 times

...

Truman

8 months ago

I agree with Eliz, it's important to learn from this incident.

upvoted 0 times

...

Eliz

8 months ago

I think we should discuss lessons learned before proceeding.

upvoted 0 times

...

Ulysses

9 months ago

And then we can focus on writing the report for a comprehensive review.

upvoted 0 times

...

Tish

9 months ago

Once that's done, we can start recovering the infected systems.

upvoted 0 times

...

Sue

9 months ago

That's a good point, we need to ensure there are no remnants left.

upvoted 0 times

...

Ulysses

10 months ago

But shouldn't we also make sure all instances of the malware are removed?

upvoted 0 times

...

Tish

10 months ago

I agree with Sue, it's important to learn from this incident.

upvoted 0 times

...

Sue

10 months ago

I think we should discuss lessons learned first.

upvoted 0 times

...