CISCO 200-201 Exam Question 186

The SOC team has confirmed a potential indicator of compromise on an endpoint. The team has narrowed the executable file’s type to a new trojan family. According to the NIST Computer Security Incident Handling Guide, what is the next step in handling this event?
A. Perform forensics analysis on the infected endpoint
B. Isolate the infected endpoint from the network
C. Prioritize incident handling based on the impact
D. Collect public information on the malware behavior
Correct Answer: D

 Get All CISCO Questions And Study Guide For Free

Send Via Email (Need Reachable Email ID)

Email: