My point is that hackers usually try to get into productive servers. You cannot just shut them down for every hacker attack, or you would never be online. You need to keep the business running while at the same time defending from attacks, so while the top scenario has a bunch of technobabble, it is more realistic.