MENU
Which piece of information is needed for attribution in an investigation?
Suggested Answer: C
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
9 comments · newest first
JA
Janessa
12 months ago
I disagree, 802.1x logs are crucial for understanding access points.
TR
Tracey
12 months ago
Surprised that people think RFC 1918 IPs are helpful for this.
LE
Leoma
1 year ago
Proxy logs are useful, but not the main thing for attribution.
KE
Kerry
1 year ago
I think RDP from the Internet is a big red flag too!
JO
Joni
1 year ago
Definitely need known threat actor behavior for attribution.
DO
Donette
1 year ago
Hmm, I'm a bit unsure about this one. I know Deming and Juran were influential in quality management, but I'm not as familiar with the other names. I'll have to think this through carefully.
NA
Nada
1 year ago
Hmm, there are a lot of details in the passage. I'll need to make sure I really understand how CCC demonstrates each of the attributes before selecting my answers.
TE
Tennie
1 year ago
Hmm, the wording is a bit tricky. I'll need to carefully read through the options to determine the valid reason.
TO
Tori
1 year ago
I'm a bit confused by the wording of this question. Can a Tools Release really be a database format change or third party fixes? I'll have to read through the options again.