MENU
Which of the following is not part of the recommended first response steps for network defenders?
Suggested Answer: D
Get Premium 312-38 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
MA
Margot
12 months ago
Wait, are we really saying to not investigate? Sounds fishy.
ET
Ettie
12 months ago
I can't believe some people would think D is optional.
LA
Latrice
12 months ago
B is crucial, you need that data ASAP!
DO
Dominque
1 year ago
A seems off, why would you restrict yourself?
SH
Shaunna
1 year ago
Definitely not C, disabling virus protection is a bad idea!
DA
Dannette
1 year ago
I vaguely recall that extracting data early is important, which makes me lean towards A or C as the correct choice for what not to do.
JO
Johna
1 year ago
I practiced a similar question where disabling virus protection was definitely not recommended. So, I think C is the answer here.
AP
Apolonia
1 year ago
I'm a bit unsure about A. I feel like restricting investigation could be a good idea to avoid contamination, but it seems odd to include it as a step.
TE
Tegan
1 year ago
I remember something about not changing the state of the device being crucial, so I think D is definitely part of the steps.
VA
Vannessa
1 year ago
Wait, what's the IPCS SIP interface? I don't think I've heard of that before. This could be tricky.
PU
Pura
1 year ago
abc'||'test'||'drive', since that seems like the most concise way to combine the three strings.
PO
port_stack
4 years ago
The correct answer should be B - Extract relevant data from the suspected devices as early as possible.
First Responder do not do any data extraction. It is done by the forensic team. Choices A, C and D are found in the list first responser steps for network defenders (do's and don'ts)
Source - Certified Network Defender (CND) Version 2 eBook w/ iLabs (Volumes 1 through 4) Page 1457 - 1464