Zero-day vulnerabilities discovered during an incident are handled through: (1) Immediate containment and isolation of affected systems; (2) Engagement with the software vendor/community for patch availability; (3) Deployment of compensating controls (WAF rules, network isolation) while a patch is developed; (4)…
What steps are taken to preserve forensic evidence during an investigation?
Forensic evidence preservation: (1) Affected systems are isolated without shutdown to preserve volatile memory; (2) Disk images and memory snapshots…
How is data integrity ensured during a disaster recovery process?
Data integrity during disaster recovery is ensured through: (1) Continuous synchronous/asynchronous replication to the secondary region; (2) Checksum…