Question: Please if you are not sure from your answer 100% do not answer this s question. Thanks in advance A security analyst received an alert
A security analyst received an alert from the antivirus software identifying a complex instance of malware on a company's network The company does not have the resources to fully analyze the malware and determine its effect on the system Which of the following is the BEST action to take in the incident recovery and post-incident response process? Wipe hard drives, reimage the systems, and return the affected systems to ready state Detect and analyzee precursors and ndicators; schedule a lessons learned meeting Remove the malware and inappropriate materials; eradicate the incident Perform event correlation; create a log retention policy O C O D
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
