A Security Analyst Observes the Following Events in the Logs

question 127

Multiple Choice

A security analyst observes the following events in the logs of an employee workstation: Given the information provided, which of the following MOST likely occurred on the workstation?

• A) Application whitelisting controls blocked an exploit payload from executing.
• B) Antivirus software found and quarantined three malware files.
• C) Automatic updates were initiated but failed because they had not been approved.
• D) The SIEM log agent was not turned properly and reported a false positive.

---

Definitions:

Precautions

Actions taken in advance to prevent potential undesirable outcomes or to minimize risks.

Moral Hazard

A situation where one party in a transaction has the opportunity to assume additional risks that negatively affect the other party because they do not bear the full consequences of their actions.

Contract Changes

Modifications or adjustments made to the terms, conditions, obligations, or rights within a contract between parties.

Behavior

The actions or reactions of an entity, often in response to its environment.