Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 Exam ISSAP Topic 3 Question 11 Discussion

Actual exam question for ISC2's ISSAP exam
Question #: 11
Topic #: 3
[All ISSAP Questions]

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution?

Each correct answer represents a part of the solution. Choose all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: B, C, D

process is responsible for supporting and building up the incident combating process. It ensures the stability of the system and also confirms

that the incident does not get any worse. The Containment phase includes the process of preventing further contamination of the system or

network, and preserving the evidence of the contamination.

The loss done to the system due to spamming is recovered using the recovery phase. The Recovery phase of the Incident handling process is

the stage at which the enterprise or the system is settled back to its balanced production state. It involves the quality assurance tests and

re-evaluation of the system for the purpose of the system revival or recovery.

The Eradication phase of the Incident handling process involves the cleaning-up of the identified harmful incidents from the system. It includes

the analyzing of the information that has been gathered for determining how the attack was committed. To prevent the incident from

happening again, it is vital to recognize how it was conceded out so that a prevention technique is applied.


Contribute your Thoughts:

Currently there are no comments in this discussion, be the first to comment!


Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77