GAQM
CPEH-001 · Question #809
Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security bre ch to his company's email server based on analysis of a suspicious connection from the…
The correct answer is C. Disconnect the email server from the network. See the full explanation below for the reasoning.
Question
Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security bre ch to his company's email server based on analysis of a suspicious connection from the email server to an unknown IP Address. What is the first thing that Nedved needs to do before contacting the incident response team?
Options
- ALeave it as it Is and contact the incident response team right away
- BBlock the connection to the suspicious IP Address from the firewall
- CDisconnect the email server from the network
- DMigrate the connection to the backup email server
How the community answered
(32 responses)- A6% (2)
- B9% (3)
- C81% (26)
- D3% (1)
Community Discussion
No community discussion yet for this question.