CAF-3 · Chapter 15 · Question 9 of 15
During a cyberattack, the IT team immediately disconnects the affected servers from the main network to prevent the malware from spreading to other departments. Which phase of the Incident Response capability does this represent?
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: B) Recovery and Isolation
Explanation
Recovery and isolation involve disconnecting or isolating affected systems to contain the threat and prevent malware from spreading, allowing operations to continue safely
More Emerging Risks & Strategic Challenges MCQs
- Q11Which globally recognized framework is designed to provide structured guidance for organizations to systematically address, manage, and…
- Q12In the context of Pakistani law, which legislative act provides the primary legal framework to investigate, prosecute, and penalize…
- Q13A manufacturing plant installs thousands of smart sensors on its assembly line equipment to monitor health and efficiency. While…
- Q14A successful cyberattack on a financial institution leads to the theft of customer funds, resulting in a massive fine from the central…
- Q15According to industry studies, organizations globally are facing a heightened risk of breaches, data loss, and operational disruptions…