A Systems Administrator Has Isolated an Infected System from the Network

question 115

Multiple Choice

A systems administrator has isolated an infected system from the network and terminated the malicious process from executing. Which of the following should the administrator do NEXT according to the incident response process?

• A) Restore lost data from a backup.
• B) Wipe the system.
• C) Document the lessons learned.
• D) Determine the scope of impact.

---

Definitions:

Dentures and Contact Lenses

Removable devices used to replace missing teeth and corrective lenses placed directly on the eye, respectively.

Living Will

A legal document in which a person specifies what actions should be taken for their health if they are no longer able to make decisions due to illness or incapacity.

Discharge Teaching

A process where healthcare professionals provide patients with instructions and information necessary for their care after leaving a medical facility.

Clinical Findings

Observations or data collected from examining a patient, including medical history, physical examination, and lab results.