Câu 144: CS0-003: CompTIA CySA+ (CS0-003)

A web application team notifies a SOC analyst that there are thousands of HTTP/404 events on the public-facing web server. Which of the following is the next step for the analyst to take?

1. A. Instruct the firewall engineer that a rule needs to be added to block this external server
2. B. Escalate the event to an incident and notify the SOC manager of the activity
3. C. Notify the incident response team that there is a DDoS attack occurring
4. D. Identify the IP/hostname for the requests and look at the related activity — đáp án hiện tại