Logical Operations Exam CFR-210 Topic 2 Question 27 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 27
Topic #: 2

An organization's public information website has been defaced. The incident response team is actively engaged in the following actions:

- Installing patches on the web server

- Turning off unnecessary services on web server

- Adding new ACL rules to the WAF

- Changing all passwords on web server accounts

Which of the following incident response phases is the team MOST likely conducting?

ARespond

BRecover

CContain

DIdentify

Show Suggested Answer

Suggested Answer: D

by Peggie at May 08, 2022, 05:21 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

4 days ago

But they are also adding new ACL rules to the WAF, which sounds like they are containing the incident.

upvoted 0 times

...

10 days ago

I agree with Celestina, they are installing patches and changing passwords to respond to the incident.

upvoted 0 times

...

11 days ago

I think the team is in the Respond phase.

upvoted 0 times

...