200-201 Exam Dumps | A threat actor penetrated an organization's network. Using the 5-tuple approach, which data points should

<< Prev Question Next Question >>

Question 7/167

A threat actor penetrated an organization's network. Using the 5-tuple approach, which data points should the analyst use to isolate the compromised host in a grouped set of logs?

A. event name, log source, time, source IP, and host name

B. protocol, source IP, source port, destination IP, and destination port

C. event name, log source, time, source IP, and username

D. protocol, log source, source IP, destination IP, and host name

Question 7/167

LEAVE A REPLY

Download PDF File