CompTIA
MB0-001 · Question #120
MB0-001 Question #120: Real Exam Question with Answer & Explanation
Sign in or unlock MB0-001 to reveal the answer and full explanation for question #120. The question stem and answer options stay visible for context.
Question
An administrator has been informed that one of the systems on the corporate network has been compromised. Which of the following steps should the administrator take NEXT to initiate proper incident response?
Options
- ATake screen shots and copy logs from the affected machine, storing these in a secured environment.
- BUse MD5 on the system and backup the current image if the system is virtual.
- CIsolate the device and perform a device wipe.
- DAlert the incident response team and await further instruction on procedures.
Unlock MB0-001 to see the answer
You've previewed enough free MB0-001 questions. Unlock MB0-001 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.