MENU
You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from certain region. You suspect a DoS incident on the network.
What will be your first reaction as a first responder?
44 comments · newest first
RA
Rana
11 months ago
Yeah, assessing the situation helps in making informed decisions.
RO
Roslyn
11 months ago
Avoiding fear, uncertainty, and doubt is key in these situations.
EL
Eliz
11 months ago
Surprised that disabling virus protection is even an option here!
GL
Glenn
12 months ago
I disagree, communicating the incident should be the priority.
KR
Krystina
12 months ago
Definitely make an initial assessment first!
DO
Dottie
1 year ago
I vaguely recall something about avoiding fear, uncertainty, and doubt, but I'm not sure how that applies here. Shouldn't we act quickly?
BR
Brunilda
1 year ago
I feel like disabling virus protection could make things worse. We should probably avoid that option altogether.
VI
Vincent
1 year ago
I'm not entirely sure, but I think communicating the incident to the team is crucial. We need everyone on the same page, right?
RA
Raymon
1 year ago
I remember that in our practice sessions, we always emphasized making an initial assessment before taking any drastic actions.
EL
Elenora
1 year ago
Okay, let's see. I think the key is to avoid panic and stay focused. Making an initial assessment sounds like the best first step to get a handle on the situation before taking any major actions.
MA
Marsha
1 year ago
Hmm, this is a tricky one. I'm a bit confused about whether I should communicate the incident right away or try to gather more information first. I'll need to think this through carefully.
CH
Cherelle
1 year ago
I'm pretty confident I know the right approach here. I'd start by making an initial assessment to understand the scope and nature of the incident.
TE
Temeka
1 year ago
Disabling virus protection? No way, that's the last thing I'd do. My first reaction would be to communicate the incident to the appropriate teams so we can coordinate a response.
LO
Lonny
2 years ago
This question is a real head-scratcher. I'm imagining the network admin just staring at the Wireshark display, muttering 'Oh no, not again!'
TO
Toi
2 years ago
B) Make an initial assessment, for sure. Wouldn't want to jump the gun and mess things up even more. Gotta gather intel first.
VI
Vi
2 years ago
D) Avoid Fear, Uncertainty and Doubt? Pfft, I'm not going to just sit back and pretend everything's fine when the network's under attack. Gotta take action!
CH
Chandra
2 years ago
C) Communicate the incident? Well, yeah, you gotta let the higher-ups know what's happening. Can't just sit on this and hope it goes away.
KA
Kattie
2 years ago
D) Avoid Fear, Uncertainty and Doubt
LA
Lanie
2 years ago
C) Communicate the incident
JE
Jennifer
2 years ago
B) Make an initial assessment
AU
Audra
2 years ago
A) Disable Virus Protection
AN
Anthony
2 years ago
B) Make an initial assessment? Duh, that's the logical first step. Can't just go around disabling important security measures without knowing what's going on.
JA
Jannette
2 years ago
User3: Communication is key, we should inform the necessary parties about the incident.
KA
Katlyn
2 years ago
User2: Agreed, we need to gather more information before taking any action.
CH
Cheryl
2 years ago
User1: Let's make an initial assessment to understand the situation.
TA
Talia
2 years ago
D) Avoid Fear, Uncertainty and Doubt - Definitely the way to go. Stay calm, be the hero this network needs.
GL
Glenna
2 years ago
D) Avoid Fear, Uncertainty and Doubt
SU
Sunny
2 years ago
C) Communicate the incident
LE
Leigha
2 years ago
D) Avoid Fear, Uncertainty and Doubt
AN
Annabelle
2 years ago
B) Make an initial assessment
HA
Hassie
2 years ago
C) Communicate the incident
NA
Natalie
2 years ago
B) Make an initial assessment
HY
Hyun
2 years ago
I think communicating the incident should also be a priority to coordinate a response.
EL
Elke
2 years ago
I agree with Misty, assessing the situation is crucial.
MI
Misty
2 years ago
I would make an initial assessment.
CO
Corrie
2 years ago
Whoa, this is like a video game level where you gotta stop the DDoS boss! I'd go with B) and make sure I don't accidentally enable the cheat codes... I mean, virus protection.
DA
Darrin
2 years ago
Let's stay calm and avoid spreading fear, uncertainty, and doubt.
DA
Dante
2 years ago
Once we know what we're dealing with, we can communicate the incident to the team.
KA
Karon
2 years ago
Good idea, we need to figure out the extent of the incident.
MA
Mariann
2 years ago
I'd go with B) and make an initial assessment.
TA
Tarra
2 years ago
C) Communicate the incident - Alerting the team is key. Can't tackle this alone, need all hands on deck.
IZ
Izetta
2 years ago
B) Make an initial assessment - Gotta gather intel before jumping into action. Disabling virus protection is a big no-no, and uncertainty won't help anyone.
BL
Blondell
2 years ago
C) Communicate the incident - Keeping everyone in the loop is crucial in handling the situation effectively.
CH
Charlie
2 years ago
B) Make an initial assessment - Gotta gather intel before jumping into action.