ExamGecko
Question list
Search
Search

Related questions











Question 392 - 312-50v12 discussion

Report
Export

You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are starting an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?

A.
IDS log
Answers
A.
IDS log
B.
Event logs on domain controller
Answers
B.
Event logs on domain controller
C.
Internet Firewall/Proxy log.
Answers
C.
Internet Firewall/Proxy log.
D.
Event logs on the PC
Answers
D.
Event logs on the PC
Suggested answer: C
asked 18/09/2024
marco giovinazzo
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first