Logical Operations Exam CFR-210 Topic 8 Question 57 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 57
Topic #: 8

As part of an incident response effort, data has been collected and analyzed, and a malware infection has been contained. Which of the following is the NEXT step the incident response team should take within the incident response process?

ABegin recovering all infected systems to return the organization to normal operations as soon as possible.

BEnsure every instance of the malware has been removed across the organization.

CDiscuss lessons learned before proceeding with other steps.

DStart writing the report to ensure a quality product is delivered by the end of the project.

Show Suggested Answer

Suggested Answer: B

by Benton at Feb 08, 2024, 06:26 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eliz

10 months ago

That makes sense, Lashawn. We need to fully contain the malware before finalizing our incident response process.

upvoted 0 times

...

Lashawn

10 months ago

I think we should ensure every instance of the malware has been removed before moving on to other steps.

upvoted 0 times

...

Eliz

10 months ago

I understand your point, Regenia. But we need to make sure we learn from this incident to prevent future ones.

upvoted 0 times

...

Regenia

10 months ago

But shouldn't we start recovering all infected systems first?

upvoted 0 times

...

Truman

10 months ago

I agree with Eliz, it's important to learn from this incident.

upvoted 0 times

...

Eliz

10 months ago

I think we should discuss lessons learned before proceeding.

upvoted 0 times

...

Ulysses

10 months ago

And then we can focus on writing the report for a comprehensive review.

upvoted 0 times

...

Tish

10 months ago

Once that's done, we can start recovering the infected systems.

upvoted 0 times

...

Sue

11 months ago

That's a good point, we need to ensure there are no remnants left.

upvoted 0 times

...

Ulysses

11 months ago

But shouldn't we also make sure all instances of the malware are removed?

upvoted 0 times

...

Tish

11 months ago

I agree with Sue, it's important to learn from this incident.

upvoted 0 times

...

Sue

11 months ago

I think we should discuss lessons learned first.

upvoted 0 times

...