An Analyst Is Investigating an Anomalous Event Reported by the SOC

question 2

Multiple Choice

An analyst is investigating an anomalous event reported by the SOC. After reviewing the system logs, the analyst identifies an unexpected addition of a user with root-level privileges on the endpoint. Which of the following data sources will BEST help the analyst to determine whether this event constitutes an incident?

• A) Patching logs
• B) Threat feed
• C) Backup logs
• D) Change requests
• E) Data classification matrix

---

Definitions:

Heredity Information

Genetic information passed from parents to offspring through genes in the DNA, influencing traits and characteristics of the next generation.

Genes

Basic units of heredity made up of DNA, responsible for governing characteristics and traits that are passed from parents to offspring.

DNA

Deoxyribonucleic acid, a molecule that contains the instructions an organism needs to develop, live, and reproduce.

Physical Characteristics

The observable attributes or features of a body, including size, shape, and appearance.