List of questions
Related questions
Question 305 - SY0-701 discussion
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control server. During the investigation, the analyst discovered that logs on the endpoint were deleted. Which of the following logs would the analyst most likely look at next?
A.
IPS
B.
Firewall
C.
ACL
D.
Windows security
Your answer:
0 comments
Sorted by
Leave a comment first