Certbie
Question 1 of 30
During a forensic investigation of a compromised network, an analyst is tasked with identifying the scope of the incident. The analyst discovers multiple indicators of compromise (IoCs) across various systems, including unusual outbound traffic patterns, unauthorized access attempts, and the presence of malware signatures. Given this scenario, which approach should the analyst prioritize to effectively identify the extent of the compromise?
Conduct a comprehensive network traffic analysis to correlate IoCs and identify affected systems.
Focus solely on the malware signatures found on the endpoints to determine the infection vector.
Review user access logs to identify unauthorized access attempts without considering network traffic.
Isolate the affected systems immediately without further investigation to prevent data loss.

Preparing for CISCO 300-215 Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free