CompTIA CySA+ (CS0-001) — Question 206
A worm was detected on multiple PCs within the remote office. The security analyst recommended that the remote office be blocked from the corporate network during the incident response. Which of the following processes BEST describes this recommendation?
Answer options
- A. Logical isolation of the remote office
- B. Sanitization of the network environment
- C. Segmentation of the network
- D. Secure disposal of affected systems
Correct answer: A
Explanation
The correct answer is A, as logical isolation involves separating the remote office from the corporate network to contain the threat. Options B and D do not pertain to isolating a location but rather focus on cleaning or disposing of systems. Option C, while related to network structure, does not specifically address the immediate need to block the remote office from the network.