Containment Quiz: Can You Stop The Spread?

Submit

2. During eradication, why should you validate system integrity after removing malware?

To ensure no malware remains and systems are safe to restore

To increase system speed

To comply with licensing

To reduce energy consumption

Submit

4. What is the primary risk of delaying containment in a security incident?

Increased cost of investigation

Wider spread of the compromise

Loss of IT staff morale

Hardware becomes obsolete

Submit

6. Which log analysis is critical for determining the scope of containment needed?

Only application logs

Network, system, and authentication logs

Only email logs

Only firewall logs

Submit

8. During eradication of a rootkit, why is reimaging the system often necessary?

Rootkits hide in system boot sectors beyond standard removal

It improves system performance

It is cheaper than other methods

Rootkits do not exist in modern systems

Submit

10. Which containment tactic is most effective against a ransomware attack spreading across file shares?

Disabling antivirus

Isolating affected systems and disabling share access

Paying the ransom

Restarting all servers

11. Which containment strategy isolates a compromised system from the network while preserving forensic evidence?

Immediate shutdown

Network isolation with live capture

Data deletion

Backup restoration

12. What is the relationship between containment and evidence preservation?

They are unrelated

Containment must avoid destroying forensic data

Evidence is always lost during containment

Containment speeds up evidence collection

Submit

14. Which eradication technique ensures malware cannot restart after removal?

Running a single antivirus pass

Disabling Windows updates

Booting from clean media and scanning

Clearing browser cache

Submit

16. In eradication, what does 'credential rotation' accomplish?

Removes attacker access

Restores system files

Scans for backdoors

Verifies file integrity

17. Which containment action prevents a worm from spreading to other systems on the network?

Increasing firewall rules

Disconnecting the infected host

Clearing the ARP cache

Updating antivirus signatures

Submit

19. During eradication, which step removes malware while maintaining system availability?

Wipe and rebuild

Patch and antivirus scan

Disable the system

Manual file deletion only

20. What is the primary goal of network segmentation in containment?

Increase bandwidth

Limit lateral movement of threats

Reduce hardware costs

Simplify user access

Containment Quiz: Can You Stop the Spread?

1. In eradication, patching vulnerabilities serves to ____.

2.

What first name or nickname would you like us to use?

2. During eradication, why should you validate system integrity after removing malware?

3. A containment policy that restricts USB access prevents ____.

4. What is the primary risk of delaying containment in a security incident?

5. In eradication, monitoring for 'beaconing' activity helps confirm ____.

6. Which log analysis is critical for determining the scope of containment needed?

7. Threat hunting during containment helps identify ____.

8. During eradication of a rootkit, why is reimaging the system often necessary?

9. An air-gapped network represents a containment strategy where systems are ____.

10. Which containment tactic is most effective against a ransomware attack spreading across file shares?

11. Which containment strategy isolates a compromised system from the network while preserving forensic evidence?

12. What is the relationship between containment and evidence preservation?

13. Containment of a data exfiltration incident requires blocking outbound traffic to ____.

14. Which eradication technique ensures malware cannot restart after removal?

15. A VLAN is used during containment to ____.

16. In eradication, what does 'credential rotation' accomplish?

17. Which containment action prevents a worm from spreading to other systems on the network?

18. A zero-trust architecture model primarily supports containment by ____.

19. During eradication, which step removes malware while maintaining system availability?

20. What is the primary goal of network segmentation in containment?