A Cyber-Incident Response Analyst Is Investigating a Suspected Cryptocurrency Miner

question 24

Multiple Choice

A cyber-incident response analyst is investigating a suspected cryptocurrency miner on a company's server. Which of the following is the FIRST step the analyst should take?

• A) Create a full disk image of the server's hard drive to look for the file containing the malware.
• B) Run a manual antivirus scan on the machine to look for known malicious software.
• C) Take a memory snapshot of the machine to capture volatile information stored in memory.
• D) Start packet capturing to look for traffic that could be indicative of command and control from the miner.

---

Definitions:

Home Page

The main or starting page of a website, which typically provides navigation to other sections of the site.

Landscape Management

The practice of designing, implementing, and maintaining outdoor environments to ensure they are sustainable, functional, and aesthetically pleasing.

Consumer-To-Consumer

A business model where consumers trade, sell, or buy goods and services directly with each other, typically facilitated by an online platform.

E-Commerce

The buying and selling of goods and services through the internet, encompassing a wide array of online business activities, including online retailing.