Discussion
Arrange these steps of responding to a suspected credential compromise in order.
1. assess and contain what that activity affected
2. revoke or rotate the credential immediately
3. correct the weakness that exposed the credential
4. review the audit log for what it was used to do
Answer: B
Correct answer: 2 - 4 - 1 - 3
Revoke first, because every minute the credential remains valid the attacker can do more. Then read the audit log to find out what it was used for, since nothing can be assessed before that is known. Then contain and remediate whatever that activity affected. Correcting the underlying weakness comes last - essential, but not before the bleeding has stopped.
No comment is present. Be the first to comment.
Loading…
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development