Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up

Why should evidence be captured before rebuilding a compromised host?

  1. A Rebuilding destroys the ability to determine how the attacker got in
  2. B It is required for insurance only
  3. C It speeds up recovery
  4. D It prevents reinfection automatically
Answer

Rebuilding destroys the ability to determine how the attacker got in

If you do not know the entry point you have not eradicated anything, and the attacker will simply return the same way.

All Cybersecurity MCQs

Login to manage your account

Please enter a valid email address.
Forgot Password?
Please enter a valid password.
OR

Don't have an account yet? Sign up as