A Company's Incident Response Team Is Handling a Threat That

question 11

Multiple Choice

A company's incident response team is handling a threat that was identified on the network. Security analysts have determined a web server is making multiple connections from TCP port 445 outbound to servers inside its subnet as well as at remote sites. Which of the following is the MOST appropriate next step in the incident response plan?

• A) Quarantine the web server
• B) Deploy virtual firewalls
• C) Capture a forensic image of the memory and disk
• D) Enable web server containerization

---

Definitions:

Cognitive Processes

Mental activities involved in acquiring, storing, and using knowledge, such as perception, thinking, reasoning, and memory.

Social Processes

The patterns of interaction, change, and development in societal structures and relationships over time.

Sense

Any of the faculties by which humans and animals perceive stimuli from the outside world, traditionally including sight, smell, hearing, taste, and touch.

Rules

Guidelines or instructions that dictate what behaviors are considered appropriate and acceptable within a specific context.