MENU
You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network. Which of the following phases of the Incident handling process should you follow next to handle this incident?
Suggested Answer: B
Get Premium GSLC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
27 comments · newest first
DE
Denna
5 months ago
Recovery comes later. First, we must contain the threat. B is definitely the right choice.
LO
Lore
5 months ago
But what about A) Recovery? We need to think about restoring services too.
ZA
Zack
5 months ago
Agreed! Containment is key to prevent further damage.
DI
Dion
6 months ago
I think we should go with B) Containment. It's crucial to stop the attack first.
EL
Eliz
6 months ago
Wait, are we sure it's a DOS attack? Could be something else!
MO
Monroe
6 months ago
Yeah, B) Containment is crucial to stop the attack!
SH
Sherill
6 months ago
B) Containment makes sense, but isn't it risky?
JO
Johnson
6 months ago
I thought we would go for A) Recovery first?
GL
Glynda
6 months ago
Definitely B) Containment is the way to go!
AL
Alesia
7 months ago
B) Containment, definitely. Unless you want to be the one explaining to the boss why the whole network is down, that is.
FA
Fairy
7 months ago
B) Containment, for sure. Gotta nip that DoS in the bud before it turns into a full-blown disaster.
KA
Karl
7 months ago
B) Containment, no doubt. Wouldn't want to be the one who let a DoS attack run rampant, that's a career-ending move!
AD
Adelina
8 months ago
I'm going with B) Containment too. Can't let that DoS attack run wild, gotta contain it ASAP.
JA
Jame
8 months ago
I agree, B) Containment is the way to go. Gotta put out that fire before it burns down the whole house!
AI
Ailene
8 months ago
Definitely B) Containment. You need to stop the attack from spreading and causing further damage.
TA
Tawna
8 months ago
I thought preparation was more about preventing incidents rather than responding to them. So, it must be containment next, right?
NA
Nan
8 months ago
I practiced a similar question where containment was the right answer for a network attack. I feel like that applies here too.
ST
Stephane
8 months ago
I'm not entirely sure, but I remember something about recovery being important after an incident. Maybe that's the next step?
JA
Jacqueline
9 months ago
I think we should focus on containment first since it's a DoS attack and we need to stop it from affecting more systems.
ME
Melita
9 months ago
I agree with the Containment approach. Once we've contained the incident, we can move on to the Recovery phase.
AV
Avery
9 months ago
Definitely Containment. We need to isolate the affected systems and block the attack traffic as soon as possible.
RO
Roxane
9 months ago
Okay, let's think this through. We need to stop the attack first, so I'm pretty sure Containment is the way to go.
MA
Malika
9 months ago
Hmm, I'm a bit unsure here. Is Containment really the right phase, or should we be looking at Recovery instead?
JA
Jacinta
10 months ago
I think the next step would be Containment to stop the attack and prevent further damage.
BR
Brock
3 months ago
Yes, Containment should be the priority right now.
BR
Britt
3 months ago
Definitely, we need to prevent any more damage.
PA
Paris
4 months ago
I agree, Containment is crucial to stop the attack.