Verified Q&A Bank

Free Practice Question #16225

In a remote workforce involving the developer CI/CD pipeline and audit logs, A workstation launches encoded PowerShell and attempts credential dumping. What should EDR do first under a containment playbook?

+1-0
MCQ
A
Approve the process permanently
B
Disable TLS globally
C
Increase mailbox quota
D
Isolate the endpoint and alert analysts
CompTIA-SecurityPlusSY0-701practice-test-03domain-4-security-operations4.1-secure-resourcesedr-containmentdifficulty-3

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series