Logical Operations Exam CFR-210 Topic 3 Question 35 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 35
Topic #: 3

During an annual penetration test, several rootkit-enabled systems are found to be exfiltrating data. The penetration test team and the internal incident response team work to begin cleanup. The company's operations team offers a new emails server to use for communications during the incident. As cleanup continues, the attackers seem to know exactly what the incident response plan is. Which of the following will prevent the attackers from compromising cleanup activities?

ACheck the DNS server for rootkits placed by the attackers.

BDisconnect the Internet router until all systems can be checked and cleaned.

CUse out-of-band communication until the end of the incident.

DDisconnect the old emails server until they can be checked and cleaned.

Show Suggested Answer

Suggested Answer: D

by Gwenn at Oct 17, 2022, 12:53 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edda

13 days ago

Wow, these attackers are really on the ball. Guess they've been reading the incident response playbook, huh? Time to improvise and get creative!

upvoted 0 times

...

Nelida

14 days ago

Disconnect the old email server? Nah, man, that's just gonna make the operations team even more stressed. Let's stick with the out-of-band communication and keep those attackers out of the loop.

upvoted 0 times

...

Whitley

19 days ago

Checking the DNS server for rootkits? That's like looking for a needle in a haystack. We need to get those compromised systems off the network before they can do any more damage.

upvoted 0 times

...

2 months ago

I think we should use out-of-band communication to prevent the attackers from knowing our plans.

upvoted 0 times

...