A Computer Emergency Response Team Is Called at Midnight to Investigate

question 1145

Multiple Choice

A computer emergency response team is called at midnight to investigate a case in which a mail server was restarted. After an initial investigation, it was discovered that email is being exfiltrated through an active connection. Which of the following is the NEXT step the team should take?

• A) Identify the source of the active connection
• B) Perform eradication of active connection and recover
• C) Performance containment procedure by disconnecting the server
• D) Format the server and restore its initial configuration

---

Definitions:

Service Provider

A company or organization that offers services to others, such as telecommunications, utilities, or healthcare.

Finished Goods Ledger

The subsidiary ledger that contains the individual accounts for each kind of commodity or product produced.

Deferred Revenue

Money received by a company for goods or services yet to be delivered or performed; classified as a liability on the balance sheet until the transaction is completed.

Product Costs

All costs incurred to acquire or produce a product that is intended for sale, including materials, labor, and overhead.