Study. uk . com
  1. Home
  2. All questions
  3. Question 232

CompTIA Security+ study material · question 232 of 611

Under an immutable infrastructure model, how is a compromised host handled?

  1. It is cleaned and returned to service
  2. It is isolated indefinitely for forensics
  3. It is destroyed and replaced from a known-good image
  4. It is patched in place during the next window
Show the answer

Answer: C. It is destroyed and replaced from a known-good image

Replacing rather than repairing removes any persistence the attacker established and prevents long-lived drift.

Challenge yourself on this topic → Study as cards