Câu 2: 300-215: Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

An employee receives an email from a "trusted" person containing a hyperlink that is malvertising. The employee clicks the link and the malware downloads. An information analyst observes an alert at the SIEM and engages the cybersecurity team to conduct an analysis of this incident in accordance with the incident response plan. Which event detail should be included in this root cause analysis?

1. A. phishing email sent to the victim
2. B. alarm raised by the SIEM — đáp án hiện tại
3. C. information from the email header
4. D. alert identified by the cybersecurity team