Free CompTIA CySA+ CS0-003 Practice Question

During the analysis of a security incident, an endpoint is flagged with several alerts, including unusual process executions and network connections to suspicious external IP addresses. Which of the following responses leverages the full potential of the EDR solution and is the MOST immediate and effective in containing the threat?

  • Performing a full memory dump of the endpoint for a detailed forensic analysis.

  • Initiating an on-demand threat hunt to gather more information about the executing processes and network connections.

  • Escalating the alerts to the organization's cyber incident response team for further investigation.

  • Isolating the endpoint from the network to prevent further potential data loss or lateral movement.

This question's topic:
CompTIA CySA+ CS0-003 / 
Security Operations
Your Score:

Check or uncheck an objective to set which questions you will receive.