Logical Operations Exam CFR-210 Topic 3 Question 35 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 35
Topic #: 3

During an annual penetration test, several rootkit-enabled systems are found to be exfiltrating data. The penetration test team and the internal incident response team work to begin cleanup. The company's operations team offers a new emails server to use for communications during the incident. As cleanup continues, the attackers seem to know exactly what the incident response plan is. Which of the following will prevent the attackers from compromising cleanup activities?

ACheck the DNS server for rootkits placed by the attackers.

BDisconnect the Internet router until all systems can be checked and cleaned.

CUse out-of-band communication until the end of the incident.

DDisconnect the old emails server until they can be checked and cleaned.

Show Suggested Answer

Suggested Answer: D

by Gwenn at Oct 17, 2022, 12:53 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edda

29 days ago

Wow, these attackers are really on the ball. Guess they've been reading the incident response playbook, huh? Time to improvise and get creative!

upvoted 0 times

...

Nelida

30 days ago

Disconnect the old email server? Nah, man, that's just gonna make the operations team even more stressed. Let's stick with the out-of-band communication and keep those attackers out of the loop.

upvoted 0 times

Mee

12 days ago

B) Disconnect the Internet router until all systems can be checked and cleaned.

upvoted 0 times

...

Fallon

14 days ago

A) Check the DNS server for rootkits placed by the attackers.

upvoted 0 times

...

Whitley

1 months ago

Checking the DNS server for rootkits? That's like looking for a needle in a haystack. We need to get those compromised systems off the network before they can do any more damage.

upvoted 0 times

...

Rory

1 months ago

Out-of-band communication is definitely the way to go here. Can't let the attackers intercept our incident response plan and stay one step ahead.

upvoted 0 times

Hubert

19 days ago

A) Check the DNS server for rootkits placed by the attackers.

upvoted 0 times

...

Renato

2 months ago

The attackers seem to know too much already. Disconnecting the internet router until cleanup is complete sounds like a good way to cut off their access and communications.

upvoted 0 times