312-39V2: Certified SOC Analyst v2

By ECCouncil · Question Mode

QuestionQ24

VerifiedIncident Response

A mid-sized hospital’s SOC team has recently identified multiple malware incidents that disrupted access to patient records and created operational inefficiencies. The SOC analysts have been assigned to eradicate the current infections and prevent future attacks by addressing the underlying vulnerabilities that enabled the malware to breach the hospital’s defenses. As an SOC analyst, recommend a step that directly addresses the weaknesses in the hospital’s network infrastructure or system configurations exploited by the malware. Which eradication step would best address these root causes?

Explanation

Fixing devices directly remediates compromised endpoints and their exploitable conditions, such as unpatched software, insecure configurations, or faulty system settings. This addresses the underlying weaknesses that allowed the malware to enter and persist, rather than only detecting, blocking, or isolating malicious files.

Community Discussion

No comments yet. Be the first to start the discussion!