A Security Analyst Is Diagnosing an Incident in Which a System

question 775

Multiple Choice

A security analyst is diagnosing an incident in which a system was compromised from an external IP address. The socket identified on the firewall was traced to 207.46.130.0:6666. Which of the following should the security analyst do to determine if the compromised system still has an active connection?

• A) tracert
• B) netstat
• C) ping
• D) nslookup

---

Definitions:

Single Channel

Utilizes only one means or avenue for distribution or communication, focusing all efforts on optimizing and maximizing that singular mode.

Single Phase

In the context of electrical engineering, it refers to the distribution of electric power using a system in which the power is supplied by a single alternating current source.

Multiphase

Pertaining to processes, systems, or tasks that occur or are executed in several distinct stages.