A Security Analyst Receives an Escalation Regarding an Unidentified Connection

question 35

Multiple Choice

A security analyst receives an escalation regarding an unidentified connection on the Accounting A1 server within a monitored zone. The analyst pulls the logs and discovers that a Powershell process and a WMI tool process were started on the server after the connection was established and that a PE format file was created in the system directory. What is the next step the analyst should take?

• A) Isolate the server and perform forensic analysis of the file to determine the type and vector of a possible attack
• B) Identify the server owner through the CMDB and contact the owner to determine if these were planned and identifiable activities
• C) Review the server backup and identify server content and data criticality to assess the intrusion risk
• D) Perform behavioral analysis of the processes on an isolated workstation and perform cleaning procedures if the file is malicious

---

Definitions:

Glucostatic Theory

A theory that suggests blood glucose levels regulate hunger and eating, where low glucose levels stimulate hunger, and high levels diminish it.

Primary Control

Primary control involves attempts to change the external world to fit one's needs or desires, typically through direct action.

Regulation Of Hunger

Regulation of hunger involves the complex interaction of biological mechanisms, including hormones and neural circuits, to maintain energy balance and prompt eating behavior.

Cannon And Washburn

Researchers who conducted experiments on hunger, concluding that stomach contractions signal hunger to the brain.