CompTIA Exam CLO-002 Topic 6 Question 66 Discussion

Actual exam question for CompTIA's CLO-002 exam

Question #: 66
Topic #: 6

An incident response team requires documentation for an email phishing campaign against a company's email server. Which of the following is the BEST resource to use to start the investigation?

AAudit and system logs

BChange management procedures

CDepartmental policies

DStandard operating procedures

Show Suggested Answer

Suggested Answer: C

by Linn at Jul 08, 2023, 09:50 AM

Limited Time Offer

25%

Off

Get Premium CLO-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherita

Standard operating procedures? Maybe if we're trying to prevent future phishing attacks, but this is about investigating the current one. Gotta go with the logs, my dude.

upvoted 0 times

...

Hassie

20 hours ago

Departmental policies? What, are we going to read through the company's 'How to Avoid Phishing' handbook? Nah, I'll pass on that one.

upvoted 0 times

...

Christene

2 days ago

Change management procedures? Really? That's not going to help with an email phishing investigation. I'm going with option A.

upvoted 0 times

...

Tyra

6 days ago

I think departmental policies could also be useful in understanding how the email server is supposed to be protected.

upvoted 0 times

...

Talia

8 days ago

I agree with Ludivina, audit and system logs can provide valuable information about the phishing campaign.

upvoted 0 times

...

Ludivina

10 days ago

I think the best resource to start the investigation is audit and system logs.

upvoted 0 times

...

Marjory

11 days ago

Audit and system logs seem like the obvious choice here. All the evidence we need is right there in the logs.

upvoted 0 times

...

Lonny

13 days ago

I think departmental policies could also be useful in guiding the investigation process.

upvoted 0 times

...

Stefany

16 days ago

I agree with Emiko. Audit and system logs can provide valuable information about the email phishing campaign.

upvoted 0 times

...

Emiko

17 days ago

I think the best resource to start the investigation would be audit and system logs.

upvoted 0 times

...