350-201 Exam Dumps | A SOC team is investigating a recent, targeted social engineering attack on multiple employees. Cross-

<< Prev Question Next Question >>

Question 30/68

A SOC team is investigating a recent, targeted social engineering attack on multiple employees. Cross- correlated log analysis revealed that two hours before the attack, multiple assets received requests on TCP port
79. Which action should be taken by the SOC team to mitigate this attack?

A. Disable BIND forwarding from the DNS server to avoid reconnaissance.

B. Disable affected assets and isolate them for further investigation.

C. Configure affected devices to disable NETRJS protocol.

D. Configure affected devices to disable the Finger service.

Question 30/68

LEAVE A REPLY

Download PDF File