Imagine that you are on duty as a first responder in the Anchor Hospital IT department. You receive complaints that users cannot send or receive email. Your initial investigation reveals that your network has been compromised by a denial of service attack $($DoS$).$ It is your job to identify systems that could be impacted, contain the attack, deploy immediate countermeasures, complete an incident response report $($note you fill out the report as if you had actually taken the steps you are advocating$),$ and recommend measures to prevent recurrence.

Instructions

Use the Incident Response Report Template $($linked in Resources$)$ to document your actions in the wake of the incident described above. By completing it you address the following assignment criteria:

Identify systems that are likely to be affected by a DoS attack.

Describe appropriate steps to contain the DoS attack.

Identify two countermeasures and detail why they are appropriate.

Describe a noncountermeasure control that is effective for mitigating similar future attacks.

Submit the completed Lab and Incident Response Report Templates.