Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

CompTIA CyberSecurity Analyst CySA+ Certification Exam CS0-003 Question # 98 Topic 10 Discussion

CompTIA CyberSecurity Analyst CySA+ Certification Exam CS0-003 Question # 98 Topic 10 Discussion

CS0-003 Exam Topic 10 Question 98 Discussion:
Question #: 98
Topic #: 10

During an extended holiday break, a company suffered a security incident. This information was properly relayed to appropriate personnel in a timely manner and the server was up to date and configured with appropriate auditing and logging. The Chief Information Security Officer wants to find out precisely what happened. Which of the following actions should the analyst take first?


A.

Clone the virtual server for forensic analysis


B.

Log in to the affected server and begin analysis of the logs


C.

Restore from the last known-good backup to confirm there was no loss of connectivity


D.

Shut down the affected server immediately


Get Premium CS0-003 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.