2d • 🙋♂️ CISSP
CISSP Practice Question (Domain 7: Security Operations)
During active ransomware containment, the operations team wants to immediately wipe and reimage infected servers to restore a critical service. Cyber insurance and law enforcement notifications are pending. What should the incident commander do FIRST?
A. Preserve forensic images of affected systems before restoration
B. Restore the service from the most recent clean backup
C. Notify the cyber insurer to avoid violating policy conditions
D. Isolate remaining unaffected segments to prevent spread
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
3
18 comments
CISSP Practice Question (Domain 7: Security Operations)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+31
2
+23
3
+22
4
+21
5
+19
Powered by