Systems Administrator Isolated Infected System Network Terminated Malicious Process Execut Q43827109
A systems administrator has isolated an infected system from thenetwork and terminated the malicious process from executing.
Which of the following should the administrator do NEXT accordingto the incident response process?
A. Restore lost data from a backup.
B. Wipe the system.
C. Document the lessons learned.
D. Determine the scope of impact.
Please explain the logic of the answer, preferably from Gibson’stextbook for Security+
Expert Answer
Answer to A systems administrator has isolated an infected system from the network and terminated the malicious process from execu…
OR