An Incident Responder Observes an Incident with Multiple Malware Downloads

question 65

Multiple Choice

An Incident Responder observes an incident with multiple malware downloads from a malicious domain. The domain in question belongs to one of the organization's suppliers. The organization needs access to the site to continue placing orders. ATP: Network is configured in Inline Block mode. How should the Incident Responder proceed?

• A) Whitelist the domain and close the incident as a false positive
• B) Identify the pieces of malware and blacklist them, then notify the supplier
• C) Blacklist the domain and IP of the attacking site
• D) Notify the supplier and block the site on the external firewall

---

Definitions:

Emotional Regulation

The process by which individuals influence which emotions they have, when they have them, and how they experience and express these emotions.

Surgery

A branch of medicine that involves the manual and instrumental techniques to treat diseases, injuries, or deformities.

Challenge Stressor

A stressful situation or demand that, while potentially stressful, is perceived as an opportunity for learning, growth, or achievement.

Complexity

The state of having multiple interconnected parts, leading to unpredictable outcomes and challenges in understanding or management.