A security administrator responds to a report of a web server that has been compromised. The security administrator observes the background has been changed to an image of an attacker group. Which of the following would be the FIRST step in the incident response process?

A security administrator responds to a report of a web server that has been compromised. The security administrator observes the background has been changed to an image of an attacker group. Which of the following would be the FIRST step in the incident response process?







A. Run an antivirus scan
B. Disable the network connection
C. Power down the server
D. Print a copy of the background






Answer: B


Computer Science

Learn More Multiple Choice Question :