Câu 45: CAS-005: CompTIA SecurityX

A security team receives alerts regarding impossible travel and possible brute-force attacks after normal business hours. After reviewing more logs, the team determines that specific users were targeted and attempts were made to transfer data to an unknown site. Which of the following should the team do to help mitigate these issues?

1. A. Create a firewall rule to prevent those users from accessing sensitive data.
2. B. Restrict uploading activity to only authorized sites. — đáp án hiện tại
3. C. Enable packet captures to continue to run for the source and destination related to the file transfer.
4. D. Disable login activity for those users after business hours.