The network administrator has been tasked to rebuild a compromised web server. The administrator is to remove the malware and install all the necessary updates and patches. This represents which of th

The correct answer is C. Eradication. Eradication is the incident response phase where malware is removed and vulnerabilities are remediated (e.g., applying patches and updates) to ensure the threat is fully eliminated from the environment. Lessons Learned (A) occurs after the incident is resolved and involves review

Security operations

Question

The network administrator has been tasked to rebuild a compromised web server. The administrator is to remove the malware and install all the necessary updates and patches. This represents which of the following stages of the Incident Handling Response?

Options

ALessons Learned
BPlan of action
CEradication
DReconstitution

How the community answered

(43 responses)

A
5% (2)
B
2% (1)
C
91% (39)
D
2% (1)

Explanation

Eradication is the incident response phase where malware is removed and vulnerabilities are remediated (e.g., applying patches and updates) to ensure the threat is fully eliminated from the environment. Lessons Learned (A) occurs after the incident is resolved and involves reviewing what happened. Plan of Action (B) is not a standard IR phase name. Reconstitution (D) refers to restoring systems to full operational status after eradication.

Topics

#incident response#eradication#malware removal#patching

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice