Free Preparation Discussions
MENU
Isaca CISA Exam - Topic 2 Question 107 Discussion
Topic #: 2
A data breach has occurred due lo malware. Which of the following should be the FIRST course of action?
The first course of action when a data breach has occurred due to malware is to quarantine the impacted systems. This means isolating the infected systems from the rest of the network and preventing any further communication or data transfer with them. This can help contain the spread of the malware, limit the damage and exposure of sensitive data, and facilitate the investigation and remediation of the incident. Quarantining the impacted systems can also help preserve the evidence and logs that may be needed for forensic analysis or legal action.
[1] provides a guide on how to respond to a data breach caused by malware and recommends quarantining the impacted systems as the first step.
[2] explains what is malware and how it can cause data breaches, and suggests quarantining the infected devices as a best practice.
[3] describes the steps involved in quarantining a system infected by malware and the benefits of doing so.
Patria
1 day agoMyra
6 days agoPage
11 days agoDylan
17 days agoMarsha
22 days agoEdna
27 days agoFallon
2 months agoGlenna
2 months agoUlysses
2 months agoDenny
2 months agoStanton
2 months agoTula
2 months agoShawnee
3 months agoEun
3 months agoMelda
3 months agoYoulanda
3 months agoMaryanne
3 months agoTonja
3 months agoJustine
4 months agoDella
4 months agoFrancene
4 months agoMaurine
4 months agoAntonio
4 months agoPeggie
5 months agoAnnett
5 months ago