MENU
During processing of the event and if the event Severity is blank, the state of the event is set to:
Suggested Answer: C
Get Premium CIS-EM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
KA
Kathryn
12 months ago
Yup, definitely Ignored!
LE
Levi
12 months ago
I thought it would be Ready, not Ignored.
BR
Brendan
1 year ago
Wait, are we sure about that?
LA
Lauran
1 year ago
Totally agree, Ignored makes sense!
LO
Lorrine
1 year ago
It's set to Ignored.
DI
Dick
1 year ago
I feel like Error could be a possibility too, but I need to double-check my notes on event states.
RE
Reed
1 year ago
I’m leaning towards Processing for this one, but I could be mixing it up with another topic we covered.
MA
Margot
1 year ago
I remember a similar question where the default state was set to Ready if no severity was specified.
SH
Sherrell
1 year ago
I think if the Severity is blank, the event might be set to Ignored, but I'm not completely sure.
CO
Corrinne
1 year ago
I'm a bit confused by the options here. I'll need to re-read the question and the SNORT alert to make sure I understand what's going on.
CA
Carma
1 year ago
Yeah, I agree with James. Option C seems to be the most comprehensive solution that meets all of the requirements. I feel pretty confident about this one.
MO
Monroe
1 year ago
I think notifying management might be an overstep without concrete evidence first, but I'm not entirely sure.
FR
Francesco
1 year ago
Hmm, I'm not sure about this one. I'll need to think it through carefully.
BE
Bev
1 year ago
Hmm, I'm a bit confused by the different address types mentioned. I'll need to make sure I understand the differences between IPv4 and IPv6 before I can determine the right solution.
MA
Matthew
1 year ago
Wasn't there a similar practice question about calculating basis? I think we had to add any closing costs, so I'm leaning toward $40,200.