Discuss GIAC GCED Exam Topic 2 Question 50

Which of the following is an outcome of the initial triage during incident response?

ARemoval of unnecessary accounts from compromised systems

BSegmentation of the network to protect critical assets

CResetting registry keys that vary from the baseline configuration

DDetermining whether encryption is in use on in scope systems

Suggested Answer: B

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Katina 10 months ago

D is important, but I thought it came later in the response.

Alonzo 11 months ago

Wait, are we really checking for encryption during triage?

Shakira 11 months ago

C seems a bit off for initial triage.

Micah 11 months ago

I think B is more critical for protecting assets.

Lezlie 11 months ago

A is definitely part of the process.

Alayna 11 months ago

I’m leaning towards the segmentation option, but I can’t recall if that’s specifically an outcome of the initial triage or a later step.

Sabine 12 months ago

I practiced a question similar to this, and I feel like determining encryption status could be part of the assessment phase.

Jacklyn 12 months ago

I remember something about network segmentation being important for protecting assets, but I'm not sure if that's part of the initial triage.

Curtis 12 months ago

I think the initial triage is more about assessing the situation rather than making changes like removing accounts.

Kimi 12 months ago

I'm a bit confused by the wording of the question. Can someone explain what "initial triage" means in the context of incident response?

Isadora 12 months ago

Okay, let's see. I think the key here is to focus on the "initial triage" part of the question. That should help me identify the right outcome.

Malcolm 12 months ago

Hmm, I'm not entirely sure about this one. The options seem similar, and I'll need to think it through carefully.

Kati 1 year ago

This seems like a straightforward incident response question. I'm pretty confident I can narrow it down to the correct answer.

Shay 1 year ago

Based on my understanding of incident response, I believe the correct answer is B. Segmenting the network to protect critical assets seems like a logical first step in the triage process.

Maryln 1 year ago

This looks like a straightforward Kubernetes manifest creation task. I'll start by reviewing the requirements carefully and then build out the YAML file step-by-step.

Matthew 2 years ago

E. Serving hot coffee and donuts to the incident response team. Can't solve cyber incidents on an empty stomach, am I right?

Quentin 2 years ago

↳ replying to Matthew

D) Determining whether encryption is in use on in scope systems

Shannon 2 years ago

↳ replying to Matthew

C) Resetting registry keys that vary from the baseline configuration

Roosevelt 2 years ago

↳ replying to Matthew

B) Segmentation of the network to protect critical assets

Shelba 2 years ago

↳ replying to Matthew

A) Removal of unnecessary accounts from compromised systems

Vonda 2 years ago

I'm going with C. Resetting registry keys that vary from the baseline configuration. Restoring normalcy is the name of the game.

Kanisha 2 years ago

A. Removal of unnecessary accounts from compromised systems. Gotta clean house before you can start incident response.

Carli 2 years ago

↳ replying to Kanisha

D) Determining whether encryption is in use on in scope systems

Felix 2 years ago

↳ replying to Kanisha

B) Segmentation of the network to protect critical assets

Chandra 2 years ago

↳ replying to Kanisha

A) Removal of unnecessary accounts from compromised systems

Lawrence 2 years ago

D. Determining whether encryption is in use on in scope systems. That's crucial to understand the extent of the incident.

Leonida 2 years ago

↳ replying to Lawrence

Encryption can play a key role in protecting sensitive data during an incident.

Leonida 2 years ago

↳ replying to Lawrence

It's important to prioritize actions based on the initial triage findings.

Leonida 2 years ago

↳ replying to Lawrence

Agreed, knowing if encryption is in use can help assess the impact of the incident.

Ozell 2 years ago

But wouldn't segmentation of the network to protect critical assets also be an important outcome?

William 2 years ago

I believe it's about removal of unnecessary accounts from compromised systems.

Anabel 2 years ago

I think it's B. Segmentation of the network to protect critical assets. That's the key outcome of the initial triage during incident response.

Willetta 2 years ago

↳ replying to Anabel

Determining if encryption is in use on in scope systems is essential for incident response as well.

Linsey 2 years ago

↳ replying to Anabel

Yes, that's true. Resetting registry keys to the baseline configuration is also a key outcome.

Barbra 2 years ago

↳ replying to Anabel

But what about removing unnecessary accounts from compromised systems? Wouldn't that also be important?

Cora 2 years ago

↳ replying to Anabel

I agree, segmenting the network is crucial to protect important assets.

Ozell 2 years ago

I think the outcome of initial triage is determining whether encryption is in use on in scope systems.

GIAC GCED Exam - Topic 2 Question 50 Discussion