اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 1170 من 1179

كل الأسئلة

While working in the SIEM solution, an analyst finds login activity on one of the organization's critical servers that occurred outside of business hours. Which should the analyst do first?

الخيارات

  • A Email the user responsible for the login activity.
  • B Search for previous incidents similar to this one.
  • C Alert the incident response team and begin an investigation.
  • D Contain the device using the organization's EDR solution.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.