A security incident is currently occurring on the company network. You discover that the attack involves a computer system that is attached to the network. You're unsure what kind of damage is being done to the network systems or data.
Which of the following actions should you take FIRST?Stop the attack and contain the damage by disconnecting the system from the network.

Respuesta :

The action that you should take first is to stop the attack and contain the damage by disconnecting the system from the network.

What is the process of preventing cyber-attacks?

It is essential to understand how to prevent and contain cyber attacks in order to protect your data and systems. For this operation, you must be required to install a specific and certified type of anti-virus software that protects your devices from unknown bugs and glitches.

This will prevent the attack from spreading and will limit the damage to the affected system. After that, you should assess the situation to determine the extent of the damage and the threat posed by the attack.

Companies should have a clear understanding of what kind of threats they may face, and they should have a plan in place to respond to these threats. This plan should include:

  • Regular system updates.
  • Patching any vulnerabilities.
  • Training staff to recognize and respond to potential threats.

To learn more about Cyberattacks, refer to the link:

https://brainly.com/question/7065536

#SPJ1

Answer:

an attack by someone who becomes an intermediary between two communication devices in an organization

Explanation: