Cisco Exam 350-201 Topic 6 Question 89 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 89
Topic #: 6

The network operations center has identified malware, created a ticket within their ticketing system, and assigned the case to the SOC with high-level information. A SOC analyst was able to stop the malware from spreading and identified the attacking host. What is the next step in the incident response workflow?

Aeradication and recovery

Bpost-incident activity

Ccontainment

Ddetection and analysis

Show Suggested Answer

Suggested Answer: A

by Emmanuel at May 28, 2024, 08:08 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ashley

12 months ago

I'd love to see the look on the malware's face when we hit it with the containment hammer. Bet it'll be crying 'Uncle!'.

upvoted 0 times

...

Elke

12 months ago

Containment is the way to go. Gotta contain that threat before we can move on to the fun part – eradicating it!

upvoted 0 times

Annett

11 months ago

B) post-incident activity

upvoted 0 times

...

Donte

11 months ago

Let's focus on containing the threat first.

upvoted 0 times

...

Tabetha

11 months ago

C) containment

upvoted 0 times

...

Lindsey

11 months ago

A) eradication and recovery

upvoted 0 times

...

Hannah

12 months ago

Detection and analysis? Nah, we already did that. Now it's time to put the smackdown on that malware!

upvoted 0 times

...

Gail

12 months ago

Containment all the way! Can't let that nasty bug infect the whole network. Time to quarantine the host!

upvoted 0 times

Karima

11 months ago

What is the next step in the incident response workflow?

upvoted 0 times

...

Catarina

11 months ago

What is the next step in the incident response workflow?

upvoted 0 times

...

Aja

1 years ago

Wait, isn't eradication and recovery the logical next step? Gotta get rid of that malware and restore everything to normal.

upvoted 0 times

Sue

12 months ago

B) post-incident activity

upvoted 0 times

...

Deandrea

12 months ago

C) containment

upvoted 0 times

...

Paris

12 months ago

A) eradication and recovery

upvoted 0 times

...

Lorrine

1 years ago

Hmm, I'd say post-incident activity. Gotta make sure we learn from this and prevent it from happening again.

upvoted 0 times

Eun

12 months ago

C) containment

upvoted 0 times

...

Delsie

1 years ago

B) post-incident activity

upvoted 0 times

...

Gilberto

1 years ago

A) eradication and recovery

upvoted 0 times

...

Martina

1 years ago

I agree with Nidia, containing the malware should be the priority.

upvoted 0 times

...

Nidia

1 years ago

I think the next step is containment.

upvoted 0 times

...

Sherron

1 years ago

Containment is definitely the next step. Can't let that malware spread any further!

upvoted 0 times

Clarinda

1 years ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Martina

1 years ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...

Linsey

1 years ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Zita

1 years ago

After containment, we can focus on eradicating the malware and recovering any affected systems.

upvoted 0 times

...

Stephen

1 years ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...

Mickie

1 years ago

Yes, containment is crucial to prevent further damage.

upvoted 0 times

...