A Security Analyst Is Determining the Point of Compromise After

question 432

Multiple Choice

A security analyst is determining the point of compromise after a company was hacked. The analyst checks the server logs and sees that a user account was logged in at night, and several large compressed files were exfiltrated. The analyst then discovers the user last logged in four years ago and was terminated. Which of the following should the security analyst recommend to prevent this type of attack in the future? (Choose two.)

• A) Review and update the firewall settings
• B) Restrict the compromised user account
• C) Disable all user accounts that are not logged in to for 180 days
• D) Enable a login banner prohibiting unauthorized use
• E) Perform an audit of all company user accounts
• F) Create a honeypot to catch the hacker

---

Definitions:

Indicator Variable

A variable in statistical modeling that assigns a value of 0 or 1 to indicate the non-presence or presence of a specific condition or attribute.

Social Mobility

The movement of individuals, families, or groups through a system of social hierarchy or stratification, which can be upward or downward.

Well-Being

A state of being comfortable, healthy, or happy, often considered holistically including physical, psychological, and social aspects.

Hypothesis Testing

A statistical method used to make inferences or draw conclusions about a population based on sample data, involving the evaluation of a null hypothesis.