CS0-003 · Question #65
CS0-003 Question #65: Real Exam Question with Answer & Explanation
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #65. The question stem and answer options stay visible for context.
Question
During an extended holiday break, a company suffered a security incident. This information was properly relayed to appropriate personnel in a timely manner and the server was up to date and configured with appropriate auditing and logging. The Chief Information Security Officer wants to find out precisely what happened. Which of the following actions should the analyst take first?
Options
- AClone the virtual server for forensic analysis
- BLog m to the affected server and begin analysis of the logs
- CRestore from the last known-good backup to confirm there was no loss of connectivity
- DShut down the affected server immediately
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.