Verified Q&A Bank

Free Practice Question #16310

In a hybrid cloud involving the branch-office firewall and customer PII, A workstation launches encoded PowerShell and attempts credential dumping. What should EDR do first under a containment playbook?

+1-0
MCQ
A
Approve the process permanently
B
Increase mailbox quota
C
Isolate the endpoint and alert analysts
D
Disable TLS globally
CompTIA-SecurityPlusSY0-701practice-test-04domain-4-security-operations4.1-secure-resourcesedr-containmentdifficulty-3

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series