First Responders, Who Are Part of a Core Incident Response

question 283

Multiple Choice

First responders, who are part of a core incident response team, have been working to contain an outbreak of ransomware that also led to data loss in a rush to isolate the three hosts that were calling out to the NAS to encrypt whole directories, the hosts were shut down immediately without investigation and then isolated. Which of the following were missed? (Choose two.)

• A) CPU, process state tables, and main memory dumps
• B) Essential information needed to perform data restoration to a known clean state
• C) Temporary file system and swap space
• D) Indicators of compromise to determine ransomware encryption
• E) Chain of custody information needed for investigation

---

Definitions:

Same Instrument

A term used in legal and financial contexts to refer to the original document or piece of evidence in question, without any alterations or modifications.

Common Law

An accumulation of legal principles formed by historical decisions made in courts rather than documented statutes.

Livable Condition

Livable condition refers to a state of housing or accommodation that meets basic living standards and conditions for safety, health, and comfort.

State Statutes

Laws established by a state's legislative body that govern matters within the state's jurisdiction.