GIAC GISF Exam - Topic 1 Question 54 Discussion

Actual exam question for GIAC's GISF exam

Question #: 54
Topic #: 1

[All GISF Questions]

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling processto handle the events and incidents. You identify Denial of Service attack (DOS) from a networklinked to your internal enterprise network. Which of the following phases of the Incident handlingprocess should you follow next to handle this incident?

AContainment

BPreparation

CRecovery

DIdentification

Show Suggested Answer

Suggested Answer: A

by Odelia at Aug 03, 2024, 07:17 AM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Viva

3 months ago

C - Recovery seems like the right next step after containment.

upvoted 0 times

...

Abel

3 months ago

Really? Isn't it too soon for containment?

upvoted 0 times

...

Alaine

3 months ago

A makes the most sense, we need to stop the attack!

upvoted 0 times

...

Hermila

4 months ago

I think B - Preparation should come first, right?

upvoted 0 times

...

Iraida

4 months ago

Definitely A - Containment is key!

upvoted 0 times

...

Yuki

4 months ago

I thought recovery was the last phase after everything is contained and resolved. So, it must be containment next, I guess?

upvoted 0 times

...

Verdell

4 months ago

I remember a question similar to this where we had to decide the next step after identification. I think containment makes sense, but I’m a bit confused.

upvoted 0 times

...

Hui

4 months ago

I’m not entirely sure, but I feel like preparation comes before any incident handling. Maybe it’s not the right answer here?

upvoted 0 times

...

Glory

5 months ago

I think after identifying a DoS attack, the next step should be containment, right? That’s what we practiced in our last simulation.

upvoted 0 times

...

Johana

5 months ago

I feel pretty confident about this one. Based on the information provided, Containment is the correct answer to handle the DoS attack after the Identification phase.

upvoted 0 times

...

Lorean

5 months ago

I'm a bit confused on the difference between Containment and Recovery in the incident handling process. I'll need to review those phases again before answering this type of question.

upvoted 0 times

...

Sheron

5 months ago

Okay, I've got this. The key here is that the question states you've already identified the DoS attack, so the next logical step would be Containment to stop the attack in its tracks.

upvoted 0 times

...

Leoma

5 months ago

This looks like a straightforward incident handling question. I think the next step after identifying the DoS attack would be Containment, to stop the attack from spreading or causing further damage.

upvoted 0 times

...

Cheryl

5 months ago

Hmm, I'm not entirely sure about this one. The options seem pretty similar - Containment, Preparation, Recovery... I'll have to think it through carefully before answering.

upvoted 0 times

...

Beckie

5 months ago

Hmm, I'm not sure about this one. I know cloud computing involves things like storage and networking, but I'm not totally clear on the exact "building blocks." I'll have to think this through carefully.

upvoted 0 times

...

Sherly

5 months ago

I'm a bit confused by the wording of the question. What exactly do they mean by "includes" all those stages? I'll have to read it over again to make sure I understand.

upvoted 0 times

...

Barney

10 months ago

I heard the IT guy at Mariotrixt.Inc is a big Mario fan. Bet he's busy trying to stomp on those pesky DoS attacks!

upvoted 0 times

...

Rebeca

10 months ago

Preparation? What, did you forget to buy popcorn? Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

Tonja

8 months ago

A) Containment

upvoted 0 times

...

Leonard

8 months ago

Containment? Absolutely, we need to stop that DoS attack before it causes more damage.

upvoted 0 times

...

Margery

8 months ago

D) Recovery

upvoted 0 times

...

Paris

8 months ago

C) Identification

upvoted 0 times

...

Shizue

8 months ago

B) Preparation

upvoted 0 times

...

Jamal

8 months ago

Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

...

Tamera

8 months ago

Preparation? What, did you forget to buy popcorn?

upvoted 0 times

...

Melodie

8 months ago

D) Recovery

upvoted 0 times

...

Kayleigh

9 months ago

C) Identification

upvoted 0 times

...

Tish

9 months ago

B) Preparation

upvoted 0 times

...

Ettie

9 months ago

A) Containment

upvoted 0 times

...

Casandra

9 months ago

A) Containment

upvoted 0 times

...

Yuette

10 months ago

Haha, Recovery? Really? We're just getting started! I'm going with Containment too, gotta stop the bleeding first.

upvoted 0 times

Linn

9 months ago

User 4: Containment first, then we can focus on recovering from the attack.

upvoted 0 times

...

Kimbery

10 months ago

User 3: Containment it is, let's stop this attack in its tracks.

upvoted 0 times

...

Lemuel

10 months ago

User 2: Definitely, containment is key to preventing further damage.

upvoted 0 times

...

Gilma

10 months ago

User 1: I agree, we need to contain the attack before we can even think about recovery.

upvoted 0 times

...

Virgie

10 months ago

Wait, are you sure? I think Identification is the key here. You need to understand the nature of the attack before you can contain it.

upvoted 0 times

...

Launa

10 months ago

Containment is the obvious next step. You need to isolate the affected network and stop the attack in its tracks.

upvoted 0 times

Melvin

9 months ago

Actually, the next step after identifying a DOS attack is containment to prevent further damage.

upvoted 0 times

...

Jesusita

9 months ago

D) Recovery

upvoted 0 times

...

Xochitl

9 months ago

That's correct. Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Fallon

9 months ago

A) Containment

upvoted 0 times

...

Goldie

11 months ago

I believe Identification should come first to fully understand the scope of the attack.

upvoted 0 times

...

Allene

11 months ago

I agree with Kenneth, Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Kenneth

11 months ago

I think we should follow the Containment phase next.

upvoted 0 times

...