312-39V2: Certified SOC Analyst v2

Question

Bonney’s system has been compromised by serious malware.

What primary action is advisable for Bonney to contain the malware incident and prevent it from spreading?

Explanation

Powering off the infected machine immediately halts its activity and network communications, limiting the malware’s ability to propagate to other systems. Administrative, legal, and law-enforcement notification do not themselves contain the active infection.

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ186

Community Discussion