An Analyst Is Investigating an Anomalous Event Reported by the SOC

question 2

Multiple Choice

An analyst is investigating an anomalous event reported by the SOC. After reviewing the system logs, the analyst identifies an unexpected addition of a user with root-level privileges on the endpoint. Which of the following data sources will BEST help the analyst to determine whether this event constitutes an incident?

• A) Patching logs
• B) Threat feed
• C) Backup logs
• D) Change requests
• E) Data classification matrix

---

Definitions:

Phosphorus

A chemical element with symbol P and atomic number 15, essential for life, involved in numerous cell functions, including energy production and bone formation.

Triglycerides

Simple lipids consisting of glycerol (an alcohol) and three fatty acids.

Lipids

Organic compounds that are fatty acids or their derivatives and are insoluble in water but soluble in organic solvents.

Organic Substances

Compounds containing carbon and typically derived from living organisms, essential to biological processes.