CS0-003 Question 110

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  It is a known vulnerability that has been exploited. So the objective of the attack had occurred. The next action here is post incident findings or exercise. The next step here is to identify the root cause, then analyze the impact, then proffer solutions for future improvement. This make C the first thing to check. Check if the root cause could be enabled USB port since the AV was USB. Then D, review log to know the impact, then offer training to staff and improve policy to state the stand against the use of USB

• Chose C1

  C seems right, D is part of the detection process, the questions specifically asks for mitigation.

• Chose A1

  Can someone explain why A is not an option?