Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA Exam SY0-601 Topic 1 Question 85 Discussion

Actual exam question for CompTIA's SY0-601 exam
Question #: 85
Topic #: 1
[All SY0-601 Questions]

A security analyst is assessing several company firewalls. Which of the following tools would the analyst most likely use to generate custom packets to use during the assessment?

Show Suggested Answer Hide Answer
Suggested Answer: B

A runbook is a set of predefined procedures and steps that guide an incident response team through the process of handling a security incident.It can help the blue team respond quickly and effectively to an indicator of compromise (IOC) by following the best practices and predefined actions for containment, eradication, recovery and lessons learned.


by Rickie at Jun 29, 2024, 02:29 AM

Limited Time Offer

25%

Off

Get Premium SY0-601 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Edison
11 months ago
I think conducting forensics on the compromised system is also important to understand the extent of the breach.
upvoted 0 times
...
Gwenn
11 months ago
I agree with Desiree, activating runbooks will help them respond quickly and effectively.
upvoted 0 times
...
Isadora
11 months ago
D) Conduct passive reconnaissance to gather information. Sounds like a good way to get caught with your pants down!
upvoted 0 times
Marlon
11 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Joana
11 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...
Desiree
11 months ago
I believe they should activate runbooks for incident response.
upvoted 0 times
...
Page
11 months ago
What do you think the blue team should do after detecting an IOC?
upvoted 0 times
...
Katina
12 months ago
A) Reimage the impacted workstations. Nah, gotta dig deeper and find the root cause first.
upvoted 0 times
...
Ira
12 months ago
B) Activate runbooks for incident response. Gotta get that incident response plan in motion, stat!
upvoted 0 times
Alexis
10 months ago
D) Conduct passive reconnaissance to gather information.
upvoted 0 times
...
Cheryll
10 months ago
C) Conduct forensics on the compromised system.
upvoted 0 times
...
Gail
10 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Ming
10 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...
Kallie
12 months ago
C) Conduct forensics on the compromised system. That's the logical next step after detecting an IOC.
upvoted 0 times
Frank
11 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Stephanie
11 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
Erick
11 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Jani
12 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...

Save Cancel