A security incident responder discovers an attacker has gained access to a network and has overwritten key system files with backdoor software. The server was reimaged and patched offline. Which of the following tools should be implemented to detect similar attacks?
A. Vulnerability scanner
B. TPM
C. Host-based firewall
D. File integrity monitor
E. NIPS
A security incident responder discovers an attacker has gained access to a network and has overwritten key system files
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A security incident responder discovers an attacker has gained access to a network and has overwritten key system files
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!