CompTIA Study Materials
AWS Study Materials
AWS Cloud Practitioner AWS Cloud Practitioner
AWS Cloud Practitioner CLF-C02
Microsoft Study Materials
Microsoft Azure Fundamentals Microsoft Azure Fundamentals
Microsoft Azure Fundamentals AZ-900

Free CompTIA CySA+ CS0-003 Practice Question

During the analysis of a security incident, an endpoint is flagged with several alerts, including unusual process executions and network connections to suspicious external IP addresses. Which of the following responses leverages the full potential of the EDR solution and is the MOST immediate and effective in containing the threat?

  • Isolating the endpoint from the network to prevent further potential data loss or lateral movement.

  • Escalating the alerts to the organization's cyber incident response team for further investigation.

  • Performing a full memory dump of the endpoint for a detailed forensic analysis.

  • Initiating an on-demand threat hunt to gather more information about the executing processes and network connections.

Subscribe to avoid duplicate questions and track your progress over time

Your Score:
Security Operations
Vulnerability Management
Incident Response and Management
Reporting and Communication
CompTIA CySA+ CS0-003
  • Security Operations
    • This question is filed here
  • Vulnerability Management
  • Incident Response and Management
  • Reporting and Communication