Question

Sondra determines that an attacker has gained access to a server containing critical business files and wishes to ensure that the attacker cannot delete those files. Which one of the following strategies would meet Sondra's goal?

A. Isolation
B. Segmentation
C. Removal
D. None of the above

Answer 1

To prevent an attacker from deleting critical business files, Isolation is the strategy that Sondra should use, which involves removing the server from the network to block further access.

Step-by-step explanation:

Sondra is looking to ensure that an attacker cannot delete critical business files from a compromised server. In this scenario, the strategy that would meet Sondra's goal is Isolation. This means removing the server from the network, thus preventing any further access to the files by the attacker. While Segmentation could limit access to different parts of a network, it does not inherently prevent file deletion if the attacker is already within the compromised segment. Removal could mean taking the data or the server offline, which is a form of isolation. Therefore, the best immediate action to prevent file deletion by the attacker is to isolate the server.