A SIEM Tool Fires an Alert About a VPN Connection

question 17

Multiple Choice

A SIEM tool fires an alert about a VPN connection attempt from an unusual location. The incident response team validates that an attacker has installed a remote access tool on a user's laptop while traveling. The attacker has the user's credentials and is attempting to connect to the network. What is the next step in handling the incident?

• A) Block the source IP from the firewall
• B) Perform an antivirus scan on the laptop
• C) Identify systems or services at risk
• D) Identify lateral movement

---

Definitions:

Myelin Sheath

An insulating layer around nerves, made of fat and protein, helping to speed up the transmission of nerve impulses.

Glial Cells

Non-neuronal cells in the central and peripheral nervous system that support, protect, and provide nutrition to neurons.

Synapse

The junction between two neurons where the exchange of electrical or chemical signals takes place, facilitating communication within the nervous system.

Neurotransmitters

Chemicals that transmit signals across a synapse from one neuron to another in the brain.