MENU
An employee receives an email from a ''trusted'' person containing a hyperlink that is malvertising. The employee clicks the link and the malware downloads. An information analyst observes an alert at the SIEM and engages the cybersecurity team to conduct an analysis of this incident in accordance with the incident response plan. Which event detail should be included in this root cause analysis?
Suggested Answer: B
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
10 comments · newest first
NE
Nettie
12 months ago
Not sure if the cybersecurity team's alert is the main focus here.
JO
Joseph
12 months ago
Wait, how did they fall for a trusted person's email?
LI
Lisandra
1 year ago
The email header info is crucial for tracing.
LY
Lynsey
1 year ago
I think the SIEM alarm is more relevant.
ME
Melina
1 year ago
Definitely the phishing email sent to the victim.
AM
Amos
1 year ago
This looks like a tricky IS-IS routing issue. I'll need to carefully review the exhibit and the question to understand the problem and identify the right solution.
RA
Rana
1 year ago
I can't recall exactly what the icon looked like but I feel like it might be something like a plus sign, too? Or maybe just a different symbol.
ER
Ernie
1 year ago
This seems pretty straightforward. I'd say the first step is to shut down the server before swapping out the GPU.
HA
Hailey
1 year ago
Okay, let me see. PolarDB is a cloud-based database, so the storage size is likely quite large. I'm going to go with C. 50TB seems like a good estimate.
AN
Antione
1 year ago
I think the answer is B - simplify. The Douglas-Peucker algorithm is designed to reduce the number of vertices in a line while preserving the overall shape, so that seems like the right approach to dynamically generalize a line.