Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
The successful attack and compromise of a web server is reported. What is the immediate action that should be taken?
Dump the volatile storage data to a disk.
Shut down the web server.
Disconnect the web server from the network.
Run the server in a fail-safe mode.
The first action is to disconnect the web server from the network to contain the damage and prevent more actions by the attacker. Dumping the volatile storage data to a disk may be used at the investigation stage but does not contain an attack in progress. To run the server in a fail-safe mode, the server needs to be shut down. Shutting down the server could potentially erase information that might be needed for a forensic investigation or to develop a strategy to prevent future similar attacks.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.