Câu 74: SY0-401: CompTIA Security+

The incident response team has received the following email message.From: [email protected] -To: [email protected] -Subject: Copyright infringement -A copyright infringement alert was triggered by IP address 13.10.66.5 at 09: 50: 01 GMT. After reviewing the following web logs for IP 13.10.66.5, the team is unable to correlate and identify the incident.09: 45: 33 13.10.66.5 http: //remote.site.com/login.asp?user=john09: 50: 22 13.10.66.5 http: //remote.site.com/logout.asp?user=anne10: 50: 01 13.10.66.5 http: //remote.site.com/access.asp?file=movie.mov11: 02: 45 13.10.65.5 http: //remote.site.com/download.asp?movie.mov=okWhich of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?

1. A. The logs are corrupt and no longer forensically sound.
2. B. Traffic logs for the incident are unavailable.
3. C. Chain of custody was not properly maintained.
4. D. Incident time offsets were not accounted for. — đáp án hiện tại