GDAT - GIAC Defending Advanced Threats Attack Practice Questions

After a phishing attack, what is the most important step to take next?

• AA. Launch a full security audit.
• BB. Implement two-factor authentication.
• CC. Train employees on phishing awareness.
• DD. Change all passwords.

A DDoS attack is detected. What should be the primary response?

• AA. Temporarily take down the website.
• BB. Redirect traffic to a cloud-based scrubbing service.
• CC. Implement additional firewalls immediately.
• DD. Log all traffic and monitor.

In case of a ransomware attack, what should a business do first?

• AA. Pay the ransom immediately.
• BB. Notify law enforcement.
• CC. Isolate infected systems from the network.
• DD. Attempt to decrypt the files.