Problem trying to download a drive update. The customer reported that the FTseer
ID: 3700635 • Letter: P
Question
Problem trying to download a drive update. The customer reported that the FTseer respondingt the secure shell, the support team member walked to a server room only to disco the machine crashed and was not able to boot. The reason was simple: No o tem was found. The company gathered the standard set of network servers (lall some version of Unix or Linux): Web, email, DNS servers, and also a dedicated PD server, used to distribute hardware drivers for the company inventory. In this case how would the company go about implementing an incident response plan? On a Tuesday morning, a company support team was alerted b server was not er remotely va perating sy projet ver thaExplanation / Answer
Q) How should the company go about implementing an Incident Response Plan?
1. Preparation - Preparation is key and it involves identifying the start of an incident, how to recover, how to get everything back to normal, and creating established security policies. So first the company's support team should be prepared well enough to thoroughly debug the issue that came on Tuesday morning.
2. Identification - Via serious of email chains and customer queries the Support Team now needs to look into the server logs and find for the issue that is prevailing. The team also may ask several questions to clarify their doubts if any which will give them better understanding of the issue.
3. Containment - Once support team knows what incident level they are dealing with, the next move is to contain the issue. The key here is to limit the scope and magnitude of the issue at hand. There are two primary areas of coverage when doing this. These essential areas of coverage are;
4. Investigation - Via series of debug and server log checks the Support Team came to know that the OS was not installed on the FTP sever and it failed to boot thus leading to the crashing of the system. So after triage when the issue is identified the next step is "Eradication".
5. Eradication - The support Team will solve the issue, by first turning down the network while the OS is being installed on the FTP server so that no one can access the servers when the process of installation is ongoing. nce the OS installation is complete, they will first dry run the system to check if login issues are fixed or not and when confirmed, will turn up the server for use.
Please let me know in case of any clarifications required. Thanks!
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.