nerdexam
Cisco

300-215 · Question #51

A threat actor has successfully attacked an organization and gained access to confidential files on a laptop. What plan should the organization initiate to contain the attack and prevent it from…

The correct answer is C. incident response. An incident response plan provides the structured steps for identifying, containing, eradicating, and recovering from a security breach, enabling you to isolate the compromised laptop and stop lateral movement before it affects other systems.

Submitted by carlos_mx· Mar 6, 2026Incident Response Processes

Question

A threat actor has successfully attacked an organization and gained access to confidential files on a laptop. What plan should the organization initiate to contain the attack and prevent it from spreading to other network devices?

Options

  • Aroot cause
  • Bintrusion prevention
  • Cincident response
  • Dattack surface

How the community answered

(33 responses)
  • A
    3% (1)
  • C
    91% (30)
  • D
    6% (2)

Explanation

An incident response plan provides the structured steps for identifying, containing, eradicating, and recovering from a security breach, enabling you to isolate the compromised laptop and stop lateral movement before it affects other systems.

Topics

#incident response#containment#attack mitigation#security planning

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice