A Security Incident Responder Discovers an Attacker Has Gained Access

question 41

Multiple Choice

A security incident responder discovers an attacker has gained access to a network and has overwritten key system files with backdoor software. The server was reimaged and patched offline. Which of the following tools should be implemented to detect similar attacks?

• A) Vulnerability scanner
• B) TPM
• C) Host-based firewall
• D) File integrity monitor
• E) NIPS

---

Definitions:

Quick Fix

A speedy yet temporary solution to a problem, often implemented as an immediate but not long-term resolution.

Assigned Rights

The transfer of rights or interests in a contractual agreement from one party to another.

Mortgage Payments

Regular payments made towards a loan used to purchase property, typically consisting of both principal and interest components.

Official-Looking

Something that appears to be formal, authoritative, or sanctioned by an official body, even if it is not.