A malware outbreak is detected by the SIEM and is confirmed as a true positive. The incident response team follows the playbook to mitigate the threat. What is the first action for the incident response team?
A) Assess the network for unexpected behavior
B) Isolate critical hosts from the network
C) Patch detected vulnerabilities from critical hosts
D) Perform analysis based on the established risk factors

Question

Quizplus · Accepted Answer

The first action in incident response is typically to contain the threat to prevent further spread, which involves isolating critical hosts from the network.

A Malware Outbreak Is Detected by the SIEM and Is