Cisco Exam 350-201 Topic 10 Question 90 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 90
Topic #: 10

Engineers are working to document, list, and discover all used applications within an organization. During the regular assessment of applications from the HR backup server, an engineer discovered an unknown application. The analysis showed that the application is communicating with external addresses on a non- secure, unencrypted channel. Information gathering revealed that the unknown application does not have an owner and is not being used by a business unit. What are the next two steps the engineers should take in this investigation? (Choose two.)

ADetermine the type of data stored on the affected asset, document the access logs, and engage the incident response team.

BIdentify who installed the application by reviewing the logs and gather a user access log from the HR department.

CVerify user credentials on the affected asset, modify passwords, and confirm available patches and updates are installed.

DInitiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

Show Suggested Answer

Suggested Answer: A, D

by Lonny at Jun 22, 2024, 02:59 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Renato

3 months ago

Haha, I bet the person who installed this 'unknown' app is trying to sneak in some personal Netflix during work hours.

upvoted 0 times

Barrie

2 months ago

D) Initiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

upvoted 0 times

...

Gretchen

3 months ago

A) Determine the type of data stored on the affected asset, document the access logs, and engage the incident response team.

upvoted 0 times

...

Buck

3 months ago

I think they should identify who installed the application by reviewing the logs and gather a user access log from the HR department.

upvoted 0 times

...

Mitzie

3 months ago

Identifying the owner and investigating the user logs is crucial. We don't want any unauthorized access or usage of this application.

upvoted 0 times

Nobuko

2 months ago

D) Initiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

upvoted 0 times

...

Margart

2 months ago

A) Determine the type of data stored on the affected asset, document the access logs, and engage the incident response team.

upvoted 0 times

...

Nilsa

3 months ago

I believe they should verify user credentials on the affected asset and confirm available patches and updates are installed.

upvoted 0 times

...

Gianna

3 months ago

This seems like a serious issue. I would start with determining the type of data and reviewing the access logs to understand the potential impact.

upvoted 0 times

Pa

3 months ago

D) Initiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

upvoted 0 times

...