Cisco Exam 350-201 Topic 10 Question 75 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 75
Topic #: 10

After a recent malware incident, the forensic investigator is gathering details to identify the breach and causes. The investigator has isolated the affected workstation. What is the next step that should be taken in this investigation?

AAnalyze the applications and services running on the affected workstation.

BCompare workstation configuration and asset configuration policy to identify gaps.

CInspect registry entries for recently executed files.

DReview audit logs for privilege escalation events.

Show Suggested Answer

Suggested Answer: C

by Earleen at Oct 08, 2023, 10:26 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!