Bird
0
0

Consider this scenario: A malware infection is detected on a company computer. Which containment step should happen first?

medium📝 Analysis Q13 of 15
Cybersecurity - Incident Response
Consider this scenario: A malware infection is detected on a company computer. Which containment step should happen first?
ANotify all employees to change passwords immediately
BDisconnect the infected computer from the network
CRun a full antivirus scan on all company devices
DDelete all files on the infected computer
Step-by-Step Solution
Solution:

  1. Step 1: Analyze immediate containment needs

    Stopping spread requires isolating the infected device quickly.

  2. Step 2: Choose the first containment action

    Disconnecting the infected computer prevents malware from spreading.

  3. Final Answer:

    Disconnect the infected computer from the network -> Option B

  4. Quick Check:

    First step = Disconnect infected device [OK]
Quick Trick: Isolate infected device before other actions [OK]
Common Mistakes:
MISTAKES
  • Starting with password changes instead of isolation
  • Running scans before stopping spread
  • Deleting files without backup

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Malware analysis basics - Quiz 13medium Advanced Threat Protection - Sandbox environments - Quiz 2easy Emerging Security Topics - AI in cybersecurity (defense and offense) - Quiz 7medium Emerging Security Topics - Why security evolves with technology - Quiz 4medium Emerging Security Topics - Blockchain security applications - Quiz 8hard Incident Response - Incident documentation - Quiz 12easy Incident Response - Incident response lifecycle - Quiz 11easy Incident Response - Communication during incidents - Quiz 1easy Security Architecture and Design - Why secure design prevents vulnerabilities - Quiz 3easy Security Architecture and Design - Threat modeling (STRIDE, DREAD) - Quiz 9hard