GIAC Exam GISF Topic 1 Question 54 Discussion

Actual exam question for GIAC's GISF exam

Question #: 54
Topic #: 1

[All GISF Questions]

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling processto handle the events and incidents. You identify Denial of Service attack (DOS) from a networklinked to your internal enterprise network. Which of the following phases of the Incident handlingprocess should you follow next to handle this incident?

AContainment

BPreparation

CRecovery

DIdentification

Show Suggested Answer

Suggested Answer: A

by Odelia at Aug 03, 2024, 07:17 AM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Launa

5 days ago

Containment is the obvious next step. You need to isolate the affected network and stop the attack in its tracks.

upvoted 0 times

...

Goldie

10 days ago

I believe Identification should come first to fully understand the scope of the attack.

upvoted 0 times

...

Allene

11 days ago

I agree with Kenneth, Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Kenneth

12 days ago

I think we should follow the Containment phase next.

upvoted 0 times

...