MENU
A company network has been infected with malware and all its servers are down. What is the first step that the Disaster Recovery team should take to restore the systems?
Suggested Answer: A
Get Premium Certified in Cybersecurity Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
AD
Adolph
6 months ago
After A, we can do B. Then restore from backups.
MI
Minna
6 months ago
I feel A is the best choice too. Safety first!
OR
Orville
6 months ago
But what about B? We need to know the extent first.
WI
Wilda
6 months ago
I agree, A is crucial. Can't risk more damage.
LI
Lindsey
7 months ago
Not sure if contacting enforcement is a priority right away...
RE
Reena
7 months ago
Wait, can you really just restore from backup without checking first?
LE
Leatha
7 months ago
A) is the way to go, no doubt about it!
AB
Abraham
8 months ago
I think B) is more important to understand the damage.
SA
Sabine
8 months ago
Definitely A) Disconnect the affected systems first!
SH
Sharmaine
8 months ago
Disconnect the systems? What is this, the 90s? Clearly the answer is to throw the whole network in the trash and start over.
TE
Teddy
8 months ago
D? Really? Calling the cops first? That's just going to slow down the recovery process.
JI
Jill
8 months ago
B sounds like the logical first step to me. Gotta assess the damage before taking action.
HU
Hubert
8 months ago
I'd go with C. Restoring from backups is the best way to get systems back up and running.
RO
Roxane
9 months ago
Definitely A. Disconnect those infected systems ASAP to prevent further spread!
NA
Nan
9 months ago
I recall a practice question where contacting law enforcement was the first step, but I think that might be more of a follow-up action after securing the systems.
CO
Colton
9 months ago
I'm not entirely sure, but I remember something about assessing the damage first. Maybe conducting a risk assessment is important before taking any other actions?
DA
Dahlia
9 months ago
I think the first step should be to disconnect the affected systems from the network to prevent further spread of the malware. That seems like a common practice in similar scenarios.
SY
Sylvia
9 months ago
I'm a bit confused on the best order of steps here. I think I'd start by disconnecting the affected systems, then do the risk assessment, and then focus on restoring from backups. But I'm not 100% sure.
AV
Avery
9 months ago
Contacting law enforcement to investigate the cyberattack seems like a good idea, but I'm not sure if that should be the very first step. Securing the systems and restoring operations should come first.
SH
Shawana
10 months ago
I think the first step is A. Disconnecting stops the spread.
JO
Joye
10 months ago
Restoring data from backup systems is probably the key to getting the systems back up and running quickly. That should be the top priority in my opinion.
SH
Sharita
10 months ago
True, but if we don’t disconnect, it’s pointless. A is key.
LA
Lawana
10 months ago
I feel like restoring data from backups is crucial, but that might come later. We definitely need to address the immediate threat first.
RE
Rebeca
11 months ago
Hmm, I'm not sure. Conducting a risk assessment to determine the extent of the damage seems important too, so we can plan the recovery process effectively.
IL
Iluminada
11 months ago
I think the first step would be to disconnect the affected systems from the network to prevent the malware from spreading further. That seems like the most urgent priority.
MA
Mabel
5 months ago
Exactly! Prioritize containment before anything else.
ZA
Zack
5 months ago
After disconnecting, then we can assess the damage.
LE
Lenna
6 months ago
Right! We can't risk the entire network going down.
LI
Linwood
6 months ago
Definitely! Isolating the systems is the first move.
LI
Lisha
10 months ago
I agree, disconnecting is crucial to stop the spread.