A Computer Emergency Response Team Is Called at Midnight to Investigate

question 1145

Multiple Choice

A computer emergency response team is called at midnight to investigate a case in which a mail server was restarted. After an initial investigation, it was discovered that email is being exfiltrated through an active connection. Which of the following is the NEXT step the team should take?

• A) Identify the source of the active connection
• B) Perform eradication of active connection and recover
• C) Performance containment procedure by disconnecting the server
• D) Format the server and restore its initial configuration

---

Definitions:

Electrocardiogram

A diagnostic test that measures the electrical activity of the heart to identify various heart conditions.

Clear And Legible

Easily readable and understandable, often referring to handwriting or print.

ECG Lead

The use of electrodes on the body to record the electrical activity of the heart from different angles, part of an electrocardiogram.

Voltage Difference

The measure of electric potential between two points, which drives the flow of electric current in a circuit.