Question

Information security system must be protected. In case of an attack, it must:
Shutdown once the attack is confirmed
Provide enough information to assess the damage caused by the attack.
do nothing
None of the above

Answer 1

Shutdown once the attack is confirmed

Answer 2

Once the attack is confirmed, the system should be shut down so that no more data is involved due to the attack.

Explanation:

• Once the attack is confirmed, the system should be shut down so that no more data is involved due to the attack. An attacker needs to keep the system running in order to perform its operation and therefore, if we shut down the system, the attacker cannot do anything except cancel its operation.
• Therefore, it is the option by which the loss can be minimized.
• Hence, option 1 is the most suitable one if anyone face such kind of problem or issue.