Câu 18: CS0-002: CompTIA CySA+ Certification Exam (CS0-002)

A security analyst has discovered malware is spreading across multiple critical systems and is originating from a single workstation, which belongs to a member of the cyberinfrastructure team who has legitimate administrator credentials. An analysis of the traffic indicates the workstation swept the network looking for vulnerable hosts to infect. Which of the following would have worked BEST to prevent the spread of this infection?

1. A. Vulnerability scans of the network and proper patching
2. B. A properly configured and updated EDR solution
3. C. A honeynet used to catalog the anomalous behavior and update the IPS
4. D. Logical network segmentation and the use of jump boxes — đáp án hiện tại