Which option is unnecessary for determining the appropriate containment strategy according to NIST.SP800-61 r2?
Which option is unnecessary for determining the appropriate containment strategy according to NIST.SP800-61 r2?
A . effectiveness of the strategy
B . time and resource needed to implement the strategy
C . need for evidence preservation
D . attack vector used to compromise the system
Answer: AB
Latest 210-255 Dumps Valid Version with 170 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
Answer is (D) per NIST 800-61r2
Criteria for determining the appropriate strategy include:
Potential damage to and theft of resources
Need for evidence preservation
Service availability (e.g., network connectivity, services provided to external parties)
Time and resources needed to implement the strategy
Effectiveness of the strategy (e.g., partial containment, full containment)
Duration of the solution (e.g., emergency workaround to be removed in four hours, temporary
workaround to be removed in two weeks, permanent solution).