A host on a company's network has been infected by a worm that appears to be spreading via SMB. A security analyst has been tasked with containing the incident ...
CompTIA CAS-004 Exam
Questions Number: 89 out of 96 Questions
92.71%
Question 89
A host on a company's network has been infected by a worm that appears to be spreading via SMB. A security analyst has been tasked with containing the incident while also maintaining evidence for a subsequent investigation and malware analysis. Which of the following steps would be best to perform FIRST?
