Câu 50: CS0-003: CompTIA CySA+ (CS0-003)

Which of the following would help an analyst to quickly find out whether the IP address in a SIEM alert is a known-malicious IP address?

1. A. Join an information sharing and analysis center specific to the company's industry
2. B. Upload threat intelligence to the IPS in STIX'TAXII format
3. C. Add data enrichment for IPs in the ingestion pipeline — đáp án hiện tại
4. D. Review threat feeds after viewing the SIEM alert