An IT technician discovers a workstation infected with ransomware on the corporate network. Arrange the initial incident response actions in the correct chronological order from first step to last step.
- 1Identify the security incident and confirm the threat.
- 2Report the incident to the designated supervisor or incident response team.
- 3Isolate the compromised system from the network.
- 4Preserve system evidence and document the chain of custody.
Cevap
The correct sequence of incident response steps is: First, identify the security incident and confirm the threat; Second, report the incident to the designated supervisor or incident response team; Third, isolate the compromised system from the network; Fourth, preserve system evidence and document the chain of custody.
Under standard CompTIA first responder procedures, the chronological order of operations is identification, reporting to proper authorities, isolating the system to contain the threat, and preserving evidence along with chain of custody documentation.
Adım Adım Çözüm
Anahtar Kavram
First Responder Incident Response Sequence