Câu 22: GCED: GIAC Certified Enterprise Defender

Which tasks would a First Responder perform during the Identification phase of Incident Response?

1. A. Verify the root cause of the incident and apply any missing security patches.
2. B. Install or reenable host-based firewalls and anti-virus software on suspected systems.
3. C. Search for sources of data and information that may be valuable in confirming and containing an incident. — đáp án hiện tại
4. D. Disconnect network communications and search for malicious executables or processes.