Câu 65: 350-201: Performing CyberOps Using Core Security Technologies (CBRCOR)

An engineer received an incident ticket of a malware outbreak and used antivirus and malware removal tools to eradicate the threat. The engineer notices that abnormal processes are still occurring in the system and determines that manual intervention is needed to clean the infected host and restore functionality. What is the next step the engineer should take to complete this playbook step?

1. A. Scan the network to identify unknown assets and the asset owners.
2. B. Analyze the components of the infected hosts and associated business services.
3. C. Scan the host with updated signatures and remove temporary containment.
4. D. Analyze the impact of the malware and contain the artifacts. — đáp án hiện tại