A Threat Actor Used a Phishing Email to Deliver a File

question 45

Multiple Choice

A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company's infrastructure. Which steps should an engineer take at the recovery stage?

• A) Determine the systems involved and deploy available patches
• B) Analyze event logs and restrict network access
• C) Review access lists and require users to increase password complexity
• D) Identify the attack vector and update the IDS signature list

---

Definitions:

Selectively

The act of choosing specific items or data while ignoring others based on certain criteria.

Consciousness

The state of being aware of and able to think about one's own existence, sensations, thoughts, surroundings, and experiences.

Short-term Memory

A capacity for holding a small amount of information in mind in an active, readily available state for a short period of time.

Sensory Registers

The initial processing centers for sensory information, capturing fleeting impressions from the environment that are quickly processed or lost.