GIAC GISF Exam - Topic 1 Question 54 Discussion

Actual exam question for GIAC's GISF exam

Question #: 54
Topic #: 1

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling processto handle the events and incidents. You identify Denial of Service attack (DOS) from a networklinked to your internal enterprise network. Which of the following phases of the Incident handlingprocess should you follow next to handle this incident?

AContainment

BPreparation

CRecovery

DIdentification

Show Suggested Answer

Suggested Answer: A

by Odelia at Aug 03, 2024, 07:17 AM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Viva

6 months ago

C - Recovery seems like the right next step after containment.

upvoted 0 times

...

Abel

6 months ago

Really? Isn't it too soon for containment?

upvoted 0 times

...

Alaine

6 months ago

A makes the most sense, we need to stop the attack!

upvoted 0 times

...

Hermila

7 months ago

I think B - Preparation should come first, right?

upvoted 0 times

...

Iraida

7 months ago

Definitely A - Containment is key!

upvoted 0 times

...

Yuki

7 months ago

I thought recovery was the last phase after everything is contained and resolved. So, it must be containment next, I guess?

upvoted 0 times

...

Verdell

7 months ago

I remember a question similar to this where we had to decide the next step after identification. I think containment makes sense, but I’m a bit confused.

upvoted 0 times

...

Hui

8 months ago

I’m not entirely sure, but I feel like preparation comes before any incident handling. Maybe it’s not the right answer here?

upvoted 0 times

...

Glory

8 months ago

I think after identifying a DoS attack, the next step should be containment, right? That’s what we practiced in our last simulation.

upvoted 0 times

...

Johana

8 months ago

I feel pretty confident about this one. Based on the information provided, Containment is the correct answer to handle the DoS attack after the Identification phase.

upvoted 0 times

...

Lorean

8 months ago

I'm a bit confused on the difference between Containment and Recovery in the incident handling process. I'll need to review those phases again before answering this type of question.

upvoted 0 times

...

Sheron

8 months ago

Okay, I've got this. The key here is that the question states you've already identified the DoS attack, so the next logical step would be Containment to stop the attack in its tracks.

upvoted 0 times

...

Leoma

8 months ago

This looks like a straightforward incident handling question. I think the next step after identifying the DoS attack would be Containment, to stop the attack from spreading or causing further damage.

upvoted 0 times

...

Cheryl

8 months ago

Hmm, I'm not entirely sure about this one. The options seem pretty similar - Containment, Preparation, Recovery... I'll have to think it through carefully before answering.

upvoted 0 times

...

Beckie

8 months ago

Hmm, I'm not sure about this one. I know cloud computing involves things like storage and networking, but I'm not totally clear on the exact "building blocks." I'll have to think this through carefully.

upvoted 0 times

...

Sherly

8 months ago

I'm a bit confused by the wording of the question. What exactly do they mean by "includes" all those stages? I'll have to read it over again to make sure I understand.

upvoted 0 times

...

Barney

1 year ago

I heard the IT guy at Mariotrixt.Inc is a big Mario fan. Bet he's busy trying to stomp on those pesky DoS attacks!

upvoted 0 times

...

Rebeca

1 year ago

Preparation? What, did you forget to buy popcorn? Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

Tonja

11 months ago

A) Containment

upvoted 0 times

...

Leonard

11 months ago

Containment? Absolutely, we need to stop that DoS attack before it causes more damage.

upvoted 0 times

...

Margery

11 months ago

D) Recovery

upvoted 0 times

...

Paris

11 months ago

C) Identification

upvoted 0 times

...

Shizue

12 months ago

B) Preparation

upvoted 0 times

...

Jamal

12 months ago

Containment is the way to go, stop that DoS attack in its tracks!

upvoted 0 times

...

Tamera

12 months ago

Preparation? What, did you forget to buy popcorn?

upvoted 0 times

...

Melodie

12 months ago

D) Recovery

upvoted 0 times

...

Kayleigh

12 months ago

C) Identification

upvoted 0 times

...

Tish

12 months ago

B) Preparation

upvoted 0 times

...

Ettie

1 year ago

A) Containment

upvoted 0 times

...

Casandra

1 year ago

A) Containment

upvoted 0 times

...

Yuette

1 year ago

Haha, Recovery? Really? We're just getting started! I'm going with Containment too, gotta stop the bleeding first.

upvoted 0 times

Linn

1 year ago

User 4: Containment first, then we can focus on recovering from the attack.

upvoted 0 times

...

Kimbery

1 year ago

User 3: Containment it is, let's stop this attack in its tracks.

upvoted 0 times

...

Lemuel

1 year ago

User 2: Definitely, containment is key to preventing further damage.

upvoted 0 times

...

Gilma

1 year ago

User 1: I agree, we need to contain the attack before we can even think about recovery.

upvoted 0 times

...

Virgie

1 year ago

Wait, are you sure? I think Identification is the key here. You need to understand the nature of the attack before you can contain it.

upvoted 0 times

...

Launa

1 year ago

Containment is the obvious next step. You need to isolate the affected network and stop the attack in its tracks.

upvoted 0 times

Melvin

1 year ago

Actually, the next step after identifying a DOS attack is containment to prevent further damage.

upvoted 0 times

...

Jesusita

1 year ago

D) Recovery

upvoted 0 times

...

Xochitl

1 year ago

That's correct. Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Fallon

1 year ago

A) Containment

upvoted 0 times

...

Goldie

1 year ago

I believe Identification should come first to fully understand the scope of the attack.

upvoted 0 times

...

Allene

1 year ago

I agree with Kenneth, Containment is crucial to stop the attack from spreading.

upvoted 0 times

...

Kenneth

1 year ago

I think we should follow the Containment phase next.

upvoted 0 times

...