MENU
You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling processto handle the events and incidents. You identify Denial of Service attack (DOS) from a networklinked to your internal enterprise network. Which of the following phases of the Incident handlingprocess should you follow next to handle this incident?
Suggested Answer: A
Get Premium GISF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
VI
Viva
10 months ago
C - Recovery seems like the right next step after containment.
AB
Abel
11 months ago
Really? Isn't it too soon for containment?
AL
Alaine
11 months ago
A makes the most sense, we need to stop the attack!
HE
Hermila
11 months ago
I think B - Preparation should come first, right?
IR
Iraida
11 months ago
Definitely A - Containment is key!
YU
Yuki
11 months ago
I thought recovery was the last phase after everything is contained and resolved. So, it must be containment next, I guess?
VE
Verdell
12 months ago
I remember a question similar to this where we had to decide the next step after identification. I think containment makes sense, but I’m a bit confused.
HU
Hui
12 months ago
I’m not entirely sure, but I feel like preparation comes before any incident handling. Maybe it’s not the right answer here?
GL
Glory
12 months ago
I think after identifying a DoS attack, the next step should be containment, right? That’s what we practiced in our last simulation.
JO
Johana
12 months ago
I feel pretty confident about this one. Based on the information provided, Containment is the correct answer to handle the DoS attack after the Identification phase.
LO
Lorean
12 months ago
I'm a bit confused on the difference between Containment and Recovery in the incident handling process. I'll need to review those phases again before answering this type of question.
SH
Sheron
1 year ago
Okay, I've got this. The key here is that the question states you've already identified the DoS attack, so the next logical step would be Containment to stop the attack in its tracks.
LE
Leoma
1 year ago
This looks like a straightforward incident handling question. I think the next step after identifying the DoS attack would be Containment, to stop the attack from spreading or causing further damage.
CH
Cheryl
1 year ago
Hmm, I'm not entirely sure about this one. The options seem pretty similar - Containment, Preparation, Recovery... I'll have to think it through carefully before answering.
BE
Beckie
1 year ago
Hmm, I'm not sure about this one. I know cloud computing involves things like storage and networking, but I'm not totally clear on the exact "building blocks." I'll have to think this through carefully.
SH
Sherly
1 year ago
I'm a bit confused by the wording of the question. What exactly do they mean by "includes" all those stages? I'll have to read it over again to make sure I understand.
BA
Barney
1 year ago
I heard the IT guy at Mariotrixt.Inc is a big Mario fan. Bet he's busy trying to stomp on those pesky DoS attacks!
RE
Rebeca
1 year ago
Preparation? What, did you forget to buy popcorn? Containment is the way to go, stop that DoS attack in its tracks!
TO
Tonja
1 year ago
A) Containment
LE
Leonard
1 year ago
Containment? Absolutely, we need to stop that DoS attack before it causes more damage.
MA
Margery
1 year ago
D) Recovery
PA
Paris
1 year ago
C) Identification
SH
Shizue
1 year ago
B) Preparation
JA
Jamal
1 year ago
Containment is the way to go, stop that DoS attack in its tracks!
TA
Tamera
1 year ago
Preparation? What, did you forget to buy popcorn?
ME
Melodie
1 year ago
D) Recovery
KA
Kayleigh
1 year ago
C) Identification
TI
Tish
1 year ago
B) Preparation
ET
Ettie
1 year ago
A) Containment
CA
Casandra
1 year ago
A) Containment
YU
Yuette
1 year ago
Haha, Recovery? Really? We're just getting started! I'm going with Containment too, gotta stop the bleeding first.
LI
Linn
1 year ago
User 4: Containment first, then we can focus on recovering from the attack.
KI
Kimbery
1 year ago
User 3: Containment it is, let's stop this attack in its tracks.
LE
Lemuel
1 year ago
User 2: Definitely, containment is key to preventing further damage.
GI
Gilma
1 year ago
User 1: I agree, we need to contain the attack before we can even think about recovery.
VI
Virgie
1 year ago
Wait, are you sure? I think Identification is the key here. You need to understand the nature of the attack before you can contain it.
LA
Launa
1 year ago
Containment is the obvious next step. You need to isolate the affected network and stop the attack in its tracks.
ME
Melvin
1 year ago
Actually, the next step after identifying a DOS attack is containment to prevent further damage.
JE
Jesusita
1 year ago
D) Recovery
XO
Xochitl
1 year ago
That's correct. Containment is crucial to stop the attack from spreading.
FA
Fallon
1 year ago
A) Containment
GO
Goldie
2 years ago
I believe Identification should come first to fully understand the scope of the attack.
AL
Allene
2 years ago
I agree with Kenneth, Containment is crucial to stop the attack from spreading.
KE
Kenneth
2 years ago
I think we should follow the Containment phase next.