GIAC
GCIH · Question #497
GCIH Question #497: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #497. The question stem and answer options stay visible for context.
Question
A Linux server which is in the scope of an Incident Response you are performing has been rebuilt and tested by the accounting department. The accounting department is the business owner of the server, and you have recommended that the server should be put back into production at 9pm this evening. The accounting department tells you that the system needs to be back in operation now. What do you do?
Options
- ABring the system back into operation now because that is the request of the business owner and
- BBring the system back into operation at 5:30pm because that is a fair compromise and document
- CBring the system back into operation at 9pm because that's what you as Incident Handler have
- DBring the system into operation at 9pm because it will be easier to monitor at that time and
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.