ITPEC IP October 2018 Question 43
ITPEC IP October 2018 — Question 43 of 100
The infected PC should be disconnected from networks immediately. Isolation limits propagation to other devices and prevents the malware from communicating outward while the incident is reported and handled according to the organization's response procedure.
Answer (c)
Why not others:
- rebooting may destroy volatile evidence or allow malware to run again
- sending e-mail from the infected PC keeps it connected and may spread the threat
- backing up after detection may copy infected or altered files
Key rule: First contain a suspected infection by isolating the host, then notify the responsible team using a safe communication channel.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.