Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

What action is considered beneficial in managing a malware incident?

Delete malicious backdoor, Trojan, or virus-related files
Reconnect to the infected network
Disable all security software
Leave system vulnerabilities unaddressed

The correct answer is: Delete malicious backdoor, Trojan, or virus-related files

Deleting malicious backdoor, Trojan, or virus-related files is indeed a beneficial action in managing a malware incident. This step is crucial in minimizing the potential damage caused by malware on affected systems. By removing these malicious files, you effectively limit the malware's ability to execute, spread, or communicate with external command-and-control servers, thereby reducing the likelihood of further compromise. Other actions, such as reconnecting to the infected network, could lead to the reintroduction of malware to the systems, perpetuating the issue. Disabling all security software would create a vulnerability and leave the system unprotected against further attacks, while leaving system vulnerabilities unaddressed would open the door for future exploits and infections. Therefore, focusing on the removal of harmful files directly addresses the immediate threat and is a fundamental part of effective incident management.