Verified Q&A Bank

Free Practice Question #16055

In a Azure tenant involving the HR portal and medical records, A workstation launches encoded PowerShell and attempts credential dumping. What should EDR do first under a containment playbook?

+1-0
MCQ
A
Approve the process permanently
B
Increase mailbox quota
C
Disable TLS globally
D
Isolate the endpoint and alert analysts
CompTIA-SecurityPlusSY0-701practice-test-01domain-4-security-operations4.1-secure-resourcesedr-containmentdifficulty-3

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series