A Systems Administrator Has Isolated an Infected System from the Network

question 308

Multiple Choice

A systems administrator has isolated an infected system from the network and terminated the malicious process from executing. Which of the following should the administrator do NEXT according to the incident response process?

• A) Restore lost data from a backup.
• B) Wipe the system.
• C) Document the lessons learned.
• D) Notify regulations of the incident.

---

Definitions:

Liberties

The state in which one lives without facing harsh restrictions from those in authority on their personal behaviors, lifestyle, or political leanings.

Lords and Barons

Titles in nobility, historically associated with individuals who possess particular ranks in the feudal system, owning land and owing allegiance to a higher lord or the monarch.

English Liberty

The concept of personal freedoms and rights as traditionally protected and recognized within English common law.