The SOC Is Reviewing Processes and Procedures After a Recent

question 42

Multiple Choice

The SOC is reviewing processes and procedures after a recent incident. The review indicates it took more than 30 minutes to determine that quarantining an infected host was the best course of action. This allowed the malware to spread to additional hosts before it was contained. Which of the following would be BEST to improve the incident response process?

• A) Updating the playbooks with better decision points
• B) Dividing the network into trusted and untrusted zones
• C) Providing additional end-user training on acceptable use
• D) Implementing manual quarantining of infected hosts

---

Definitions:

Job-Order Costing System

A method of assigning costs to specific production batches or jobs, often used in manufacturing where the products are distinctly different.

Direct Labor Cost

The total cost of wages paid to employees who are directly involved in the production of a product or service.

Job-Order Costing System

A costing method used to collect and assign manufacturing costs to individual units or specific jobs.

Manufacturing Overhead

All indirect costs associated with the production process, excluding direct materials and direct labor expenses.