Free CompTIA Security+ SY0-701 Practice Question

During an incident response, an organization has identified an infected workstation that is part of a botnet and is communicating with external command and control servers. What is the BEST immediate action to contain this threat?

  • Change access controls on the infected workstation

  • Perform a vulnerability scan to identify the infected workstation

  • Isolate the infected workstation from the network

  • Capture network traffic to analyze the communication with the command and control servers

This question's topic:
CompTIA Security+ SY0-701 / 
Security Operations
Your Score:

Check or uncheck an objective to set which questions you will receive.

Wipe Score
SAVE $49
CompTIA Security+ Voucher (SY0-701)
$404.00 $355.00