First Responders, Who Are Part of a Core Incident Response

question 283

Multiple Choice

First responders, who are part of a core incident response team, have been working to contain an outbreak of ransomware that also led to data loss in a rush to isolate the three hosts that were calling out to the NAS to encrypt whole directories, the hosts were shut down immediately without investigation and then isolated. Which of the following were missed? (Choose two.)

• A) CPU, process state tables, and main memory dumps
• B) Essential information needed to perform data restoration to a known clean state
• C) Temporary file system and swap space
• D) Indicators of compromise to determine ransomware encryption
• E) Chain of custody information needed for investigation

---

Definitions:

Equality

The state of being equal, especially in status, rights, and opportunities, promoting fairness and justice within society.

Due Process Clause

Constitutional guarantees that ensure fair treatment through the normal judicial system, especially as a citizen's entitlement.

Fourteenth Amendment

An amendment to the U.S. Constitution granting citizenship to all persons born or naturalized in the United States, including formerly enslaved people, and guaranteeing all citizens “equal protection of the laws.”

Bill Of Rights

The first ten amendments to the United States Constitution, guaranteeing certain rights and freedoms to American citizens.