Câu 116: GCIH: GIAC Certified Incident Handler

You are responding to an incident in which the organization's Extranet server has been compromised. The Extranet is the browser home page for most users in the organization. You have been instructed to watch the attacker, but minimize the business impact and the risk of further compromise. How can you continue providing services to the organization's users while isolating the compromised server?

1. A. Point the domain name to the IP address of a secondary, patched production server — đáp án hiện tại
2. B. Change the server IP address to a different IP address
3. C. Isolate the switch port and put the system on a quarantined VLAN
4. D. Rebuild the system during a downtime window and restore the service