350-201 Exam Dumps | A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and

<< Prev Question Next Question >>

Question 15/35

A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company's infrastructure. Which steps should an engineer take at the recovery stage?

A. Review access lists and require users to increase password complexity

B. Determine the systems involved and deploy available patches

C. Analyze event logs and restrict network access

D. Identify the attack vector and update the IDS signature list

Question 15/35

LEAVE A REPLY

Download PDF File