اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 1158 من 1179

كل الأسئلة

A security operations center analyst receives an alert from the security information and event management system. The analyst quickly reviews the alert and sees a workstation infected with malware. The analyst then uses the endpoint detection and response tool to isolate the workstation from the network. Which of the following best describes the steps that occurred in this scenario?

الخيارات

  • A Analysis, containment, and eradication
  • B Analysis, eradication, and recovery
  • C Detection, analysis, and containment
  • D Isolation, mitigation, and analysis

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.