During an Investigation, a Security Analyst Determines Suspicious Activity Occurred

question 79

Multiple Choice

During an investigation, a security analyst determines suspicious activity occurred during the night shift over the weekend. Further investigation reveals the activity was initiated from an internal IP going to an external website. Which of the following would be the MOST appropriate recommendation to prevent the activity from happening in the future?

• A) An IPS signature modification for the specific IP addresses
• B) An IDS signature modification for the specific IP addresses
• C) A firewall rule that will block port 80 traffic
• D) A firewall rule that will block traffic from the specific IP addresses

---

Definitions:

Confabulation

The production of fabricated, distorted, or misinterpreted memories about oneself or the world, without the conscious intention to deceive.

Stored Memory

Memories that are kept in the brain for long periods, potentially for a lifetime, allowing individuals to retain knowledge, experiences, and skills.

Unrelated Items

Items or elements that do not share a common connection, association, or relevance to each other in a given context.

Hippocampus

An essential part of the brain associated with memory formation, especially long-term memory, and spatial navigation.