Câu 147: CS0-003: CompTIA CySA+ (CS0-003)

An employee accessed a website that caused a device to become infected with invasive malware. The incident response analyst has:• created the initial evidence log.• disabled the wireless adapter on the device.• interviewed the employee, who was unable to identify the website that was accessed.• reviewed the web proxy traffic logs. Which of the following should the analyst do to remediate the infected device?

1. A. Update the system firmware and reimage the hardware. — đáp án hiện tại
2. B. Install an additional malware scanner that will send email alerts to the analyst.
3. C. Configure the system to use a proxy server for Internet access.
4. D. Delete the user profile and restore data from backup.