Skip to content
?
Cyber Interview Questions
?
Questions
Quiz
Interview
Guides
Search
Home
Quiz
Incident Responder
Quiz for
Incident Responder
1 / 12
30s · 0 pts
You've confirmed one compromised host. The business demands it be wiped and back online in 10 minutes. What do you push for?
1
Determine scope first — hunt the same IOCs and creds elsewhere before eradicating.
2
Disconnect the whole company from the internet until the investigation wraps up.
3
Delete the malware file, leave the host online, and watch it for any recurrence.
4
Wipe and restore the affected host now, since fast recovery matters most here.
Tip: press 1–4 to answer, Enter for next.