Security Operations第 64 / 100 题
During incident response, which step focuses on limiting the damage and preventing the threat from spreading?
a.Eradication
b.Containment
c.Recovery
d.Preparation
解析
Containment isolates affected systems to stop the incident from spreading while preserving evidence. It buys time to plan eradication without further loss. Short-term and long-term containment strategies balance disruption and safety.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which is the correct order of the incident response process?
- Which system aggregates and correlates log data from many sources to detect security events in near real time?
- Which control monitors network traffic and actively blocks detected malicious activity inline?
- Which technology inspects data in motion and at rest to prevent unauthorized exfiltration of sensitive information?
- Which process applies vendor updates to fix known software vulnerabilities?
- Reducing a system's attack surface by disabling unneeded services and applying secure configurations is called: