Free CompTIA CySA+ CS0-003 Practice Question

After containing a confirmed security breach, an incident responder is tasked with the remediation process. What should be their FIRST step to ensure a thorough and effective remediation?

  • Update the firewall rules to prevent future attacks.

  • Immediately restore all systems from backup to minimize downtime.

  • Determine the full scope of the intrusion.

  • Install anti-virus software on all endpoints.

This question's topic:
CompTIA CySA+ CS0-003 / 
Incident Response and Management
Your Score:

Check or uncheck an objective to set which questions you will receive.