A Security Analyst Is Diagnosing an Incident in Which a System

question 775

Multiple Choice

A security analyst is diagnosing an incident in which a system was compromised from an external IP address. The socket identified on the firewall was traced to 207.46.130.0:6666. Which of the following should the security analyst do to determine if the compromised system still has an active connection?

• A) tracert
• B) netstat
• C) ping
• D) nslookup

---

Definitions:

Federal Reserve Board

An independent agency of the federal government established in 1913 to regulate the nation’s banking and financial industry.

Securities

Financial instruments that represent an ownership position in a publicly-traded corporation (stock), a creditor relationship with a governmental body or a corporation (bond), or rights to ownership as represented by an option.