Fortinet
NSE7_SOC_AR-7.6 · Question #4
NSE7_SOC_AR-7.6 Question #4: Real Exam Question with Answer & Explanation
Sign in or unlock NSE7_SOC_AR-7.6 to reveal the answer and full explanation for question #4. The question stem and answer options stay visible for context.
Question
According to the National Institute of Standards and Technology (NIST) cybersecurity framework, incident handling activities can be divided into phases. In which incident handling phase do you quarantine a compromised host in order to prevent an adversary from using it as a stepping stone to the next phase of an attack?
Options
- AContainment
- BAnalysis
- CEradication
- DRecovery
Unlock NSE7_SOC_AR-7.6 to see the answer
You've previewed enough free NSE7_SOC_AR-7.6 questions. Unlock NSE7_SOC_AR-7.6 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.