Eccouncil Exam 312-38 Topic 7 Question 38 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 38
Topic #: 7

[All 312-38 Questions]

Which of the following is not part of the recommended first response steps for network defenders?

ARestrict yourself from doing the investigation

BExtract relevant data from the suspected devices as early as possible

CDisable virus protection

DDo not change the state of the suspected device

Show Suggested Answer

Suggested Answer: D

by Amie at May 04, 2022, 11:13 PM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

port_stack

2 years ago

The correct answer should be B - Extract relevant data from the suspected devices as early as possible. First Responder do not do any data extraction. It is done by the forensic team. Choices A, C and D are found in the list first responser steps for network defenders (do's and don'ts) Source - Certified Network Defender (CND) Version 2 eBook w/ iLabs (Volumes 1 through 4) Page 1457 - 1464

upvoted 1 times

...