CompTIA
JK0-018 · Question #900
A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is…
Sign in or unlock JK0-018 to reveal the answer and full explanation for question #900. The question stem and answer options stay visible for context.
Question
A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is best suited to restore the server?
Options
- AWipe the storage, reinstall the OS from original media and restore the data from the last known
- BKeep the data partition, restore the OS from the most current backup and run a full system antivirus scan.
- CFormat the storage and reinstall both the OS and the data from the most current backup.
- DErase the storage, reinstall the OS from most current backup and only restore the data that was
Unlock JK0-018 to see the answer
You've previewed enough free JK0-018 questions. Unlock JK0-018 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.