An Incident Responder Needs to Remediate a Group of Endpoints

question 113

Multiple Choice

An Incident Responder needs to remediate a group of endpoints but also wants to copy a potentially suspicious file to the ATP file store. In which scenario should the Incident Responder copy a suspicious file to the ATP file store?

• A) The responder needs to analyze with Cynic
• B) The responder needs to isolate it from the network
• C) The responder needs to write firewall rules
• D) The responder needs to add the file to a whitelist

---

Definitions:

Human Resource Management

The practice of recruiting, hiring, deploying, and managing an organization's employees.

Health and Safety Programs

Initiatives and procedures implemented by organizations to prevent injury and illness in the workplace and ensure compliance with safety regulations.

Industrial Relations

The study and practice of managing the workforce, including the relationships between employers and employees, labor unions, and government agencies.

Operations Department

The division within an organization responsible for overseeing the day-to-day execution of the company's operational activities.