Certified Information Security Manager (CISM) — Question 957

Which of the following is MOST important to consider when planning the eradication of a cyberattack?

Answer options

• A. The skills and competencies of the eradication team
• B. The cost of tools and efforts required for the process
• C. Obtain a clean backup of the operating system
• D. Knowledge about the type and source of the threat

Correct answer: D

Explanation

Understanding the type and source of the threat is crucial for effectively planning the eradication of a cyberattack, as it helps in formulating a targeted response. While the skills of the team, tool costs, and having a clean backup are important, they do not provide the foundational knowledge necessary to address the specific threat at hand.