Câu 6: 312-39V2: Certified SOC Analyst (CSA) v2

The Security Operations Center (SOC) team is investigating a suspected malware incident during the Analysis Phase of their incident response process. Their primary goal is to validate the initial detection, ensure the threat is real, and gather critical intelligence to understand the scope of the attack. Which of the following actions should the SOC team take to confirm their initial findings and eliminate false alarms?

1. A. Verify generated logs
2. B. Scan the enterprise environment and update the scope
3. C. Root-cause analysis
4. D. Verify false positives — đáp án hiện tại