Câu 159: GCIH: GIAC Certified Incident Handler

The incident response team has been working with the various systems teams to find a way to gain root access to systems in event of an incident. It has been proposed that the system teams keep copies of all system passwords and crypto keys in sealed envelopes in a safe in the IT director's office. The envelopes are kept updated by the systems teams and access to the envelopes is logged by the IT director. However, the VMware system team is concerned about unqualified handlers having root access to the VMware host servers. What additional qualifier would make this agreement more agreeable to the VMware system team?

1. A. Agree that only handlers with VMware experience will access the system
2. B. Create a password reset disk to be used in case of an incident — đáp án hiện tại
3. C. Have one member of the incident response team know the password
4. D. Call VMware system team for incidents involving their systems to gain access