Câu 58: CS0-003: CompTIA CySA+ (CS0-003)

A security analyst discovers an ongoing ransomware attack while investigating a phishing email. The analyst downloads a copy of the file from the email and isolates the affected workstation from the network. Which of the following activities should the analyst perform next?

1. A. Wipe the computer and reinstall software
2. B. Shut down the email server and quarantine it from the network
3. C. Acquire a bit-level image of the affected workstation
4. D. Search for other mail users who have received the same file — đáp án hiện tại