A technician suspects that a mobile device has connected to a rogue wireless network and transmitted sensitive data. Place the standard incident response steps in the correct order to mitigate the security threat.
- 1Disconnect the device from all wireless networks by enabling Airplane Mode.
- 2Remove the saved network profile corresponding to the rogue Wi-Fi network.
- 3Change compromised user credentials associated with corporate accounts accessed on the device.
- 4Disable Airplane Mode and connect to a verified, encrypted enterprise Wi-Fi network.
Answer
The correct sequence to mitigate a rogue Wi-Fi connection incident is: First, enable Airplane Mode to isolate the device; second, remove the rogue network profile; third, update compromised user account credentials; and finally, disable Airplane Mode to reconnect to a safe, secure network.
The correct troubleshooting sequence follows standard incident response procedures: isolate the compromised device immediately (Airplane Mode), remove the malicious configuration (forget rogue network profile), protect user identity (reset account credentials), and safely restore connectivity to a trusted network.
Step-by-Step Solution
Key Concept
Mobile Device Security Incident Containment and Remediation
Estimated Time:1m 0s