Certified Incident Handler (CIH) Practice Ecam

What is a primary concern of malware containment efforts?

1. Preserving the integrity of affected systems

2. Maximizing user downtime

3. Disregarding system security protocols

4. Always restoring data from backup

The correct answer is: Preserving the integrity of affected systems

The primary concern of malware containment efforts is to preserve the integrity of affected systems. When an organization faces a malware incident, it is crucial to minimize the impact on system operations and data integrity. Ensuring that the systems remain functional and that data is not corrupted or altered during the containment process is vital for maintaining trust and reliability in the affected systems. This focus allows for a more effective recovery process, enabling the organization to restore regular operations without significant data loss or system failure. Maximizing user downtime is counterproductive in containment efforts, as the goal is to reduce downtime and maintain service availability as much as possible. Disregarding system security protocols would lead to further vulnerabilities and could exacerbate the incident, compromising both system security and integrity. Always restoring data from backup is important but is not the primary concern during the initial containment phase; the immediate focus is on securing the systems and preventing further damage. Hence, the preservation of system integrity stands out as the key priority in malware containment.