Study. uk . com
  1. Home
  2. All questions
  3. Question 814

CISM study material · question 814 of 1000

Which two automatic containment actions does NIST give as examples? Choose two.

  1. Rotating every user's credentials
  2. Transferring a compromised endpoint to an isolated remediation network
  3. Rebuilding the affected server from a clean image
  4. Quarantining malware
Show the answer

Answer: D. Quarantining malware
B. Transferring a compromised endpoint to an isolated remediation network

SP 800-61r3 suggests letting cybersecurity technologies act on their own for some containment: putting malware in quarantine, moving a compromised endpoint onto an isolated remediation network, or stopping an infected container.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MI-01.C1

Challenge yourself on this topic → Study as cards