Free Preparation Discussions
MENU
Isaca CISA Exam - Topic 2 Question 107 Discussion
Topic #: 2
A data breach has occurred due lo malware. Which of the following should be the FIRST course of action?
The first course of action when a data breach has occurred due to malware is to quarantine the impacted systems. This means isolating the infected systems from the rest of the network and preventing any further communication or data transfer with them. This can help contain the spread of the malware, limit the damage and exposure of sensitive data, and facilitate the investigation and remediation of the incident. Quarantining the impacted systems can also help preserve the evidence and logs that may be needed for forensic analysis or legal action.
[1] provides a guide on how to respond to a data breach caused by malware and recommends quarantining the impacted systems as the first step.
[2] explains what is malware and how it can cause data breaches, and suggests quarantining the infected devices as a best practice.
[3] describes the steps involved in quarantining a system infected by malware and the benefits of doing so.
Fallon
10 hours agoGlenna
6 days agoUlysses
11 days agoDenny
16 days agoStanton
21 days agoTula
26 days agoShawnee
1 month agoEun
1 month agoMelda
1 month agoYoulanda
2 months agoMaryanne
2 months agoTonja
2 months agoJustine
2 months agoDella
2 months agoFrancene
2 months agoMaurine
3 months agoAntonio
3 months agoPeggie
3 months agoAnnett
3 months ago