Incidents · Question 11 of 12
A hacked website has been taken offline. In which order do you proceed according to the security guidelines?
1 answer is correct. Hard
Show answer
Answer
- D Back up server and logs, analyze the point of entry, clean up or restore from a backup made before the attack, close the vulnerability, then go back online
Explanation
Without analysis the vulnerability remains open and the attack repeats. You therefore first secure data and logs (Apache, SSH, FTP, MySQL, system), find the point of entry and restore cleanly. A backup must date from before the attack. Afterwards the site remains under special observation.