Cisco Exam 350-201 Topic 6 Question 89 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 89
Topic #: 6

The network operations center has identified malware, created a ticket within their ticketing system, and assigned the case to the SOC with high-level information. A SOC analyst was able to stop the malware from spreading and identified the attacking host. What is the next step in the incident response workflow?

Aeradication and recovery

Bpost-incident activity

Ccontainment

Ddetection and analysis

Show Suggested Answer

Suggested Answer: A

by Emmanuel at May 28, 2024, 08:08 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ashley

10 months ago

I'd love to see the look on the malware's face when we hit it with the containment hammer. Bet it'll be crying 'Uncle!'.

upvoted 0 times

...

Elke

10 months ago

Containment is the way to go. Gotta contain that threat before we can move on to the fun part – eradicating it!

upvoted 0 times

Annett

9 months ago

B) post-incident activity

upvoted 0 times

...

Donte

9 months ago

Let's focus on containing the threat first.

upvoted 0 times

...

Tabetha

9 months ago

C) containment

upvoted 0 times

...

Lindsey

9 months ago

A) eradication and recovery

upvoted 0 times

...

Hannah

10 months ago

Detection and analysis? Nah, we already did that. Now it's time to put the smackdown on that malware!

upvoted 0 times

...

Gail

10 months ago

Containment all the way! Can't let that nasty bug infect the whole network. Time to quarantine the host!

upvoted 0 times

Karima

9 months ago

What is the next step in the incident response workflow?

upvoted 0 times

...

Catarina

9 months ago

What is the next step in the incident response workflow?

upvoted 0 times

...

Aja

11 months ago

Wait, isn't eradication and recovery the logical next step? Gotta get rid of that malware and restore everything to normal.

upvoted 0 times

Sue

10 months ago

B) post-incident activity

upvoted 0 times

...

Deandrea

10 months ago

C) containment

upvoted 0 times

...

Paris

10 months ago

A) eradication and recovery

upvoted 0 times

...

Lorrine

11 months ago

Hmm, I'd say post-incident activity. Gotta make sure we learn from this and prevent it from happening again.

upvoted 0 times

Eun

10 months ago

C) containment

upvoted 0 times

...

Delsie

10 months ago

B) post-incident activity

upvoted 0 times

...

Gilberto

10 months ago

A) eradication and recovery

upvoted 0 times

...

Martina

11 months ago

I agree with Nidia, containing the malware should be the priority.

upvoted 0 times

...

Nidia

11 months ago

I think the next step is containment.

upvoted 0 times

...

Sherron

11 months ago

Containment is definitely the next step. Can't let that malware spread any further!

upvoted 0 times

Clarinda

10 months ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Martina

10 months ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...

Linsey

10 months ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Zita

11 months ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Stephen

11 months ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...

Mickie

11 months ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...