Security Operations
Question #17
Your organization is experiencing a DDoS attack overwhelming the network. As part of the detection and response phase, what is the first step you should take?
A. Mitigate the attack and restore impacted services
B. Change the firewall policies to block the attack
C. Review security policies and update them if required
D. Consult a list of dangerous IP addresses to verify if the attack is coming from one of them
Domain Concept: Security Operations
This scenario evaluates management-level decision making in Security Operations. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.