CompTIA CySA+ CS0-003 Practice Question
After containing a confirmed security breach, an incident responder is tasked with the remediation process. What should be their FIRST step to ensure a thorough and effective remediation?
Determine the full scope of the intrusion.
Update the firewall rules to prevent future attacks.
Immediately restore all systems from backup to minimize downtime.
Install anti-virus software on all endpoints.