A SOC Engineer Discovers That the Organization Had Three DDOS

question 73

Multiple Choice

A SOC engineer discovers that the organization had three DDOS attacks overnight. Four servers are reported offline, even though the hardware seems to be working as expected. One of the offline servers is affecting the pay system reporting times. Three employees, including executive management, have reported ransomware on their laptops. Which steps help the engineer understand a comprehensive overview of the incident?

• A) Run and evaluate a full packet capture on the workloads, review SIEM logs, and define a root cause.
• B) Run and evaluate a full packet capture on the workloads, review SIEM logs, and plan mitigation steps.
• C) Check SOAR to learn what the security systems are reporting about the overnight events, research the attacks, and plan mitigation step.
• D) Check SOAR to know what the security systems are reporting about the overnight events, review the threat vectors, and define a root cause.

---

Definitions:

Inpatient Population

Individuals who are hospitalized and receiving medical treatment or care within a facility.

Mood Stabilisers

Medications used to treat mood disorders by helping to balance mood swings.

Bipolar Disorder

A mental health condition characterized by extreme mood swings, including emotional highs (mania or hypomania) and lows (depression).

Electroconvulsive Therapy (ECT)

A psychiatric treatment in which seizures are electrically induced in patients to provide relief from severe mental disorders.