After Reading a Security Bulletin, a Network Security Manager Is

question 129

Multiple Choice

After reading a security bulletin, a network security manager is concerned that a malicious actor may have breached the network using the same software flaw. The exploit code is publicly available and has been reported as being used against other industries in the same vertical. Which of the following should the network security manager consult FIRST to determine a priority list for forensic review?

• A) The vulnerability scan output
• B) The IDS logs
• C) The full packet capture data
• D) The SIEM alerts

---

Definitions:

Obsessive-Compulsive Disorder

A chronic and long-lasting disorder where a person has uncontrollable, reoccurring thoughts (obsessions) and behaviors (compulsions) that he or she feels the urge to repeat over and over.

Compulsion

A repetitive and seemingly purposeful behavior performed in response to uncontrollable urges or according to a ritualistic set of rules.

Locks

Mechanical or electronic devices used for securing objects such as doors or containers to prevent unauthorized access.

Repetitive Behavior

Actions that are repeated over and over, often without a clear goal or purpose, sometimes seen in various psychological or developmental disorders.