A Team of Security Analysts Has Been Alerted to Potential

question 141

Multiple Choice

A team of security analysts has been alerted to potential malware activity. The initial examination indicates one of the affected workstations is beaconing on TCP port 80 to five IP addresses and attempting to spread across the network over port 445. Which of the following should be the team's NEXT step during the detection phase of this response process?

• A) Escalate the incident to management, who will then engage the network infrastructure team to keep them informed.
• B) Depending on system criticality, remove each affected device from the network by disabling wired and wireless connections.
• C) Engage the engineering team to block SMB traffic internally and outbound HTTP traffic to the five IP addresses.
• D) Identify potentially affected systems by creating a correlation search in the SIEM based on the network traffic.

---

Definitions:

IQ Scores

Numerical measures of a person's intelligence relative to that of others, based on standardized tests.

Special Program

An educational or training program designed to meet the needs of a particular group of people, such as students with disabilities or gifted students.

Test Bias

The presence of certain elements in a test that systematically prevent accurate, fair, or equitable measurements across different groups of test-takers.

School Performance

A measure of scholastic achievement, often gauged through grades, test scores, and teacher assessments, reflecting a student's academic abilities.