A Security Team Received an Alert of Suspicious Activity on a User's

question 17

Multiple Choice

A security team received an alert of suspicious activity on a user's Internet browser. The user's anti-virus software indicated that the file attempted to create a fake recycle bin folder and connect to an external IP address. Which two actions should be taken by the security analyst with the executable file for further analysis? (Choose two.)

• A) Evaluate the process activity in Cisco Umbrella.
• B) Analyze the TCP/IP Streams in Cisco Secure Malware Analytics (Threat Grid).
• C) Evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid).
• D) Analyze the Magic File type in Cisco Umbrella.
• E) Network Exit Localization in Cisco Secure Malware Analytics (Threat Grid).

---

Definitions:

Actual Level Of Activity

The real measure of how much work is performed or output is produced in a given period, often compared to planned or standard levels of activity.

Standard Activity

A benchmark or base level of activity used for planning, measuring, and controlling performance.

Quantity Standard

A preset benchmark that specifies the expected amount or number of units to be used or produced under normal conditions.

Variable Manufacturing Overhead

The portion of manufacturing overhead costs that varies with the level of production output, such as utility costs or indirect materials.