CISSP-ISSAP: Information Systems Security Architecture Professional

Question

You work as an incident-handling manager for Orangesect Inc. You detect a virus-attack incident in your company’s network. You develop a signature based on the characteristics of the virus detected. Which of the following phases of the incident-handling process will use the signature to resolve this incident?

Explanation

In the standard incident-handling lifecycle, Eradication is the phase in which the root cause of the incident is removed from affected systems; when a virus has been detected, a signature derived from its characteristics is used during Eradication to locate and remove every instance of the malicious code and eliminate remaining traces of the infection before systems are restored to production.

CISSP-ISSAP: Information Systems Security Architecture Professional

AstroTutor

Notes

Readiness

QuestionQ61

Community Discussion