Câu 72: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A security analyst observes the following while looking through network traffic in a company's cloud log: Which of the following steps should the security analyst take FIRST?

1. A. Quarantine 10.0.5.52 and run a malware scan against the host.
2. B. Access 10.0.5.52 via EDR and identify processes that have network connections. — đáp án hiện tại
3. C. Isolate 10.0.50.6 via security groups.
4. D. Investigate web logs on 10.0.50.6 to determine if this is normal traffic.