CISM Certified Information Security Manager – Question1197

What should an information security team do FIRST when notified by the help desk that an employee's computer has been infected with malware?

A.
Take a forensic copy of the hard drive.
B. Restore the files from a secure backup.
C. Isolate the computer from the network.
D. Use anti-malware software to clean the infected computer.

Correct Answer: C