Verified Q&A Bank

Free Practice Question #16140

In a hybrid cloud involving the public web application and financial reports, A workstation launches encoded PowerShell and attempts credential dumping. What should EDR do first under a containment playbook?

+1-0
MCQ
A
Increase mailbox quota
B
Isolate the endpoint and alert analysts
C
Disable TLS globally
D
Approve the process permanently
CompTIA-SecurityPlusSY0-701practice-test-02domain-4-security-operations4.1-secure-resourcesedr-containmentdifficulty-3

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series