Incident response · Question 12 of 12
Ransomware is currently spreading over SMB on the network. Which containment measures are most urgent?
2 answers are correct. Hard
Show answer
Answer
- B Isolate affected segments and block SMB between zones
- D Lock compromised accounts
Explanation
During active spread, every minute counts. Network separation and locking the accounts being used stop the spread. Assessment of the damage follows afterwards.