cism题目共同学习讨论

Rockblue

Mccoys兄，俺今天也在某题库中看到类似的这个题，和你给出的答案是不同的，看这里的解释来讲，full backup是对的。

会不会题或答案也有争议？？？


23. Which one of the following actions tends to have the highest payoff during the detection stage of dealing with a security incident?

A. Immediately deleting all sensitive data.  
B. Promptly taking a full backup of the system under attack.  
C. Removing potentially dangerous user privileges.  
D. Using anti-virus software.  

Answer: B

An attacker will try to erase or corrupt evidence of an attack. Taking a backup may result in evidence being retained for analysis and legal purposes.

superdang

最好好像CISA那样有本习题集就好了