An Incident Responder Wants to Create a Timeline for a Recent

question 239

Multiple Choice

An Incident Responder wants to create a timeline for a recent incident using Syslog in addition to ATP for the After Actions Report. What are two reasons the responder should analyze the information using Syslog? (Choose two.)

• A) To have less raw data to analyze
• B) To evaluate the data, including information from other systems
• C) To access expanded historical data
• D) To determine what policy settings to modify in the Symantec Endpoint Protection Manager (SEPM)
• E) To determine the best cleanup method

---

Definitions:

Physical Tension

A state of physical unease or strain often resulting from stress or exercise.

Aggressive Dog

A dog that exhibits behaviors intended to threaten or harm, often as a result of fear, territoriality, or lack of socialization.

Amygdala

A region of the brain within the temporal lobe, involved in experiencing emotions, particularly fear and pleasure.

Acquisition

The process of learning or obtaining new information, skills, behaviors, or possessions.