An Incident Responder Has Noticed That for the Last Month

question 323

Multiple Choice

An Incident Responder has noticed that for the last month, the same endpoints have been involved with malicious traffic every few days. The network team also identified a large amount of bandwidth being used over P2P protocol. Which two steps should the Incident Responder take to restrict the endpoints while maintaining normal use of the systems? (Choose two.)

• A) Report the users to their manager for unauthorized usage of company resources
• B) Blacklist the domains and IP associated with the malicious traffic
• C) Isolate the endpoints
• D) Blacklist the endpoints
• E) Find and blacklist the P2P client application

---

Definitions:

Dramatic Sagas

Intense or exciting stories or series of events that are deeply embedded in the history or culture of an organization.

Worker Involvement

The practice of including employees in decision-making, problem-solving, and improvements within the workplace.

Observable Culture

The visible elements of an organization's culture, such as behaviors, language, symbols, and rituals that can be witnessed and experienced by members and outsiders.

Norms

Established standards of behavior or guidelines that are considered acceptable within a group or society.