Comp TIA Security + Certification Questions Part 2

Question : 29 of 60

Marks: +1, -0

A security analyst notices anomalous activity coming from several workstations in the organizations. Upon identifying and containing the issue, which of the following should the security analyst do NEXT?

Document and lock the workstations in a secure area to establish chain of custody
Notify the IT department that the workstations are to be reimaged and the data restored for reuse
Notify the IT department that the workstations may be reconnected to the network for the users to continue working
Document findings and processes in the after-action and lessons learned report

Validate

Go to Question:

Prev Question

Next Question