Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Solution Specialist: Security Operations 7.6 Architect & Analyst · Fortinet
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
- * NIST Cybersecurity Framework Overview: * The NIST Cybersecurity Framework provides a structured approach for managing and mitigating cybersecurity risks. Incident handling is divided into several phases to systematically address and resolve incidents. * Incident Handling Phases: * Preparation: Establishing and maintaining an incident response capability. * Detection and Analysis: Identifying and investigating suspicious activities to confirm an incident. * Containment, Eradication, and Recovery: * Containment: Limiting the impact of the incident. * Eradication: Removing the root cause of the incident. * Recovery: Restoring systems to normal operation. * Containment Phase: * The primary goal of the containment phase is to prevent the incident from spreading and causing further damage. * Quarantining a Compromised Host: * Quarantining involves isolating the compromised host from the rest of the network to prevent adversaries from moving laterally and causing more harm. * Techniques include network segmentation, disabling network interfaces, and applying access controls.