A Security Team Received an Alert of Suspicious Activity on a User's

question 17

Multiple Choice

A security team received an alert of suspicious activity on a user's Internet browser. The user's anti-virus software indicated that the file attempted to create a fake recycle bin folder and connect to an external IP address. Which two actions should be taken by the security analyst with the executable file for further analysis? (Choose two.)

• A) Evaluate the process activity in Cisco Umbrella.
• B) Analyze the TCP/IP Streams in Cisco Secure Malware Analytics (Threat Grid).
• C) Evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid).
• D) Analyze the Magic File type in Cisco Umbrella.
• E) Network Exit Localization in Cisco Secure Malware Analytics (Threat Grid).

---

Definitions:

Dispute Resolution

The process of resolving a conflict, dispute or claim between parties using various techniques, such as mediation or arbitration.

Mixed-Group Teams

Teams composed of members from diverse backgrounds and disciplines, aimed at enhancing creativity, decision-making, and problem-solving through a variety of perspectives.

Support From Authorities

Refers to the backing or assistance provided by individuals in positions of power or influence, often vital for the initiation or continuation of a project or policy.

Social Identity Theory

A psychological theory proposing that people categorize themselves in social groups, which influences their behaviors and attitudes towards in-group and out-group members.