Câu 35: 300-215: Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

A security team received an alert of suspicious activity on a user's Internet browser. The user's anti-virus software indicated that the file attempted to create a fake recycle bin folder and connect to an external IP address. Which two actions should be taken by the security analyst with the executable file for further analysis?(Choose two.)

1. A. Evaluate the process activity in Cisco Umbrella.
2. B. Analyze the TCP/IP Streams in Cisco Secure Malware Analytics (Threat Grid). — đáp án hiện tại
3. C. Evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid). — đáp án hiện tại
4. D. Analyze the Magic File type in Cisco Umbrella.
5. E. Network Exit Localization in Cisco Secure Malware Analytics (Threat Grid).