nerdexam
GIAC

GISP · Question #59

John works as a Network Administrator of a We-are-secure Inc. The We-are-secure server is based on Windows Server 2003. One day, while analyzing the network security, he receives an error message…

The correct answer is A. He should upgrade his antivirus program. C. He should observe the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new malicious process is running, he should kill that process. See the full explanation below for the reasoning.

Question

John works as a Network Administrator of a We-are-secure Inc. The We-are-secure server is based on Windows Server 2003. One day, while analyzing the network security, he receives an error message that Kernel32.exe is encountering a problem. Which of the following steps should John take as a countermeasure to this situation? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AHe should upgrade his antivirus program.
  • BHe should download the latest patches for Windows Server 2003 from the Microsoft site, so that he can repair the kernel.
  • CHe should observe the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new malicious process is running, he should kill that process.
  • DHe should restore his Windows settings.

How the community answered

(17 responses)
  • A
    82% (14)
  • B
    6% (1)
  • D
    12% (2)

Community Discussion

No community discussion yet for this question.

Full GISP Practice