CompTIA
SY0-301 · Question #900
SY0-301 Question #900: Real Exam Question with Answer & Explanation
Sign in or unlock SY0-301 to reveal the answer and full explanation for question #900. The question stem and answer options stay visible for context.
Question
A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is best suited to restore the server?
Options
- AWipe the storage, reinstall the OS from original media and restore the data from the last known
- BKeep the data partition, restore the OS from the most current backup and run a full system antivirus scan.
- CFormat the storage and reinstall both the OS and the data from the most current backup.
- DErase the storage, reinstall the OS from most current backup and only restore the data that was
Unlock SY0-301 to see the answer
You've previewed enough free SY0-301 questions. Unlock SY0-301 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.