Câu 28: 312-39V2: Certified SOC Analyst (CSA) v2

A mid-sized hospital’s SOC team has recently detected multiple malware incidents that have disrupted access to patient records and caused operational inefficiencies. The SOC analysts have been tasked with eradicating the current infections and preventing future attacks by addressing the underlying vulnerabilities that allowed the malware to breach the hospital’s defenses. As an SOC analyst, you need to recommend a step that directly targets the weaknesses in the hospital’s network infrastructure or system configurations exploited by the malware. Which of the following eradication steps would best address these root causes?

1. A. Implementing Blacklist techniques for file execution
2. B. Updating Malware Database with vendor signatures
3. C. Fixing Devices — đáp án hiện tại
4. D. Using Antivirus Tools for quarantine