GIAC GISF Exam - Topic 1 Question 54 Discussion

Actual exam question for GIAC's GISF exam

Question #: 54
Topic #: 1

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling processto handle the events and incidents. You identify Denial of Service attack (DOS) from a networklinked to your internal enterprise network. Which of the following phases of the Incident handlingprocess should you follow next to handle this incident?

AContainment

BPreparation

CRecovery

DIdentification

Show Suggested Answer

Suggested Answer: A

by Odelia at Aug 03, 2024, 07:17 AM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Viva

8 months ago

C - Recovery seems like the right next step after containment.

upvoted 0 times

...

Abel

9 months ago

Really? Isn't it too soon for containment?

upvoted 0 times

...

Alaine

9 months ago

A makes the most sense, we need to stop the attack!

upvoted 0 times

...

Hermila

9 months ago

I think B - Preparation should come first, right?

upvoted 0 times

...

Iraida

9 months ago

Definitely A - Containment is key!

upvoted 0 times

...

Yuki

9 months ago

I thought recovery was the last phase after everything is contained and resolved. So, it must be containment next, I guess?

upvoted 0 times

...

Verdell

10 months ago

I remember a question similar to this where we had to decide the next step after identification. I think containment makes sense, but I’m a bit confused.

upvoted 0 times

...

Hui

10 months ago

I’m not entirely sure, but I feel like preparation comes before any incident handling. Maybe it’s not the right answer here?

upvoted 0 times

...

Glory

10 months ago

I think after identifying a DoS attack, the next step should be containment, right? That’s what we practiced in our last simulation.

upvoted 0 times

...

Johana

10 months ago

I feel pretty confident about this one. Based on the information provided, Containment is the correct answer to handle the DoS attack after the Identification phase.

upvoted 0 times

...

Lorean

10 months ago

I'm a bit confused on the difference between Containment and Recovery in the incident handling process. I'll need to review those phases again before answering this type of question.

upvoted 0 times

...

Sheron

10 months ago

Okay, I've got this. The key here is that the question states you've already identified the DoS attack, so the next logical step would be Containment to stop the attack in its tracks.

upvoted 0 times

...

Leoma

10 months ago

This looks like a straightforward incident handling question. I think the next step after identifying the DoS attack would be Containment, to stop the attack from spreading or causing further damage.

upvoted 0 times

...

Cheryl

10 months ago

Hmm, I'm not entirely sure about this one. The options seem pretty similar - Containment, Preparation, Recovery... I'll have to think it through carefully before answering.

upvoted 0 times

...

Beckie

10 months ago

Hmm, I'm not sure about this one. I know cloud computing involves things like storage and networking, but I'm not totally clear on the exact "building blocks." I'll have to think this through carefully.

upvoted 0 times

...

Sherly

10 months ago

I'm a bit confused by the wording of the question. What exactly do they mean by "includes" all those stages? I'll have to read it over again to make sure I understand.

upvoted 0 times

...

Barney

1 year ago

I heard the IT guy at Mariotrixt.Inc is a big Mario fan. Bet he's busy trying to stomp on those pesky DoS attacks!

upvoted 0 times

...

Rebeca

1 year ago

Preparation? What, did you forget to buy popcorn? Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

Tonja

1 year ago

A) Containment

upvoted 0 times

...

Leonard

1 year ago

Containment? Absolutely, we need to stop that DoS attack before it causes more damage.

upvoted 0 times

...

Margery

1 year ago

D) Recovery

upvoted 0 times

...

Paris

1 year ago

C) Identification

upvoted 0 times

...

Shizue

1 year ago

B) Preparation

upvoted 0 times

...

Jamal

1 year ago

Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

...

Tamera

1 year ago

Preparation? What, did you forget to buy popcorn?

upvoted 0 times

...

Melodie

1 year ago

D) Recovery

upvoted 0 times

...

Kayleigh

1 year ago

C) Identification

upvoted 0 times

...

Tish

1 year ago

B) Preparation

upvoted 0 times

...

Ettie

1 year ago

A) Containment

upvoted 0 times

...

Casandra

1 year ago

A) Containment

upvoted 0 times

...

Yuette

1 year ago

Haha, Recovery? Really? We're just getting started! I'm going with Containment too, gotta stop the bleeding first.

upvoted 0 times

Linn

1 year ago

User 4: Containment first, then we can focus on recovering from the attack.

upvoted 0 times

...

Kimbery

1 year ago

User 3: Containment it is, let's stop this attack in its tracks.

upvoted 0 times

...

Lemuel

1 year ago

User 2: Definitely, containment is key to preventing further damage.

upvoted 0 times

...

Gilma

1 year ago

User 1: I agree, we need to contain the attack before we can even think about recovery.

upvoted 0 times

...

Virgie

1 year ago

Wait, are you sure? I think Identification is the key here. You need to understand the nature of the attack before you can contain it.

upvoted 0 times

...

Launa

1 year ago

Containment is the obvious next step. You need to isolate the affected network and stop the attack in its tracks.

upvoted 0 times

Melvin

1 year ago

Actually, the next step after identifying a DOS attack is containment to prevent further damage.

upvoted 0 times

...

Jesusita

1 year ago

D) Recovery

upvoted 0 times

...

Xochitl

1 year ago

That's correct. Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Fallon

1 year ago

A) Containment

upvoted 0 times

...

Goldie

1 year ago

I believe Identification should come first to fully understand the scope of the attack.

upvoted 0 times

...

Allene

1 year ago

I agree with Kenneth, Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Kenneth

1 year ago

I think we should follow the Containment phase next.

upvoted 0 times

...