Logical Operations Exam CFR-210 Topic 8 Question 57 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 57
Topic #: 8

As part of an incident response effort, data has been collected and analyzed, and a malware infection has been contained. Which of the following is the NEXT step the incident response team should take within the incident response process?

ABegin recovering all infected systems to return the organization to normal operations as soon as possible.

BEnsure every instance of the malware has been removed across the organization.

CDiscuss lessons learned before proceeding with other steps.

DStart writing the report to ensure a quality product is delivered by the end of the project.

Show Suggested Answer

Suggested Answer: B

by Benton at Feb 08, 2024, 06:26 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eliz

12 months ago

That makes sense, Lashawn. We need to fully contain the malware before finalizing our incident response process.

upvoted 0 times

...

Lashawn

12 months ago

I think we should ensure every instance of the malware has been removed before moving on to other steps.

upvoted 0 times

...

Eliz

1 years ago

I understand your point, Regenia. But we need to make sure we learn from this incident to prevent future ones.

upvoted 0 times

...

Regenia

1 years ago

But shouldn't we start recovering all infected systems first?

upvoted 0 times

...

Truman

1 years ago

I agree with Eliz, it's important to learn from this incident.

upvoted 0 times

...

Eliz

1 years ago

I think we should discuss lessons learned before proceeding.

upvoted 0 times

...

Ulysses

1 years ago

And then we can focus on writing the report for a comprehensive review.

upvoted 0 times

...

Tish

1 years ago

Once that's done, we can start recovering the infected systems.

upvoted 0 times

...

Sue

1 years ago

That's a good point, we need to ensure there are no remnants left.

upvoted 0 times

...

Ulysses

1 years ago

But shouldn't we also make sure all instances of the malware are removed?

upvoted 0 times

...

Tish

1 years ago

I agree with Sue, it's important to learn from this incident.

upvoted 0 times

...

Sue

1 years ago

I think we should discuss lessons learned first.

upvoted 0 times

...