ITPEC IP October 2022 Question 36
ITPEC IP October 2022 — Question 36 of 100
The PC should immediately be disconnected from networks to contain the suspected infection. Isolation limits propagation to other systems and prevents malicious software from communicating externally. The incident can then be reported through a clean channel and handled according to organizational procedures.
Answer (c)
Why not others:
- rebooting may alter evidence and does not contain network spread
- sending e-mail from the infected PC continues network use
- backing up files may copy infected or altered content and delays containment
Key rule: On malware detection, contain first by isolating the device, then report, investigate, eradicate, and recover.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.