Cisco Exam 350-201 Topic 5 Question 18 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 18
Topic #: 5

Refer to the exhibit.

An engineer configured this SOAR solution workflow to identify account theft threats and privilege escalation, evaluate risk, and respond by resolving the threat. This solution is handling more threats than Security analysts have time to analyze. Without this analysis, the team cannot be proactive and anticipate attacks. Which action will accomplish this goal?

AExclude the step ''BAN malicious IP'' to allow analysts to conduct and track the remediation

BInclude a step ''Take a Snapshot'' to capture the endpoint state to contain the threat for analysis

CExclude the step ''Check for GeoIP location'' to allow analysts to analyze the location and the associated risk based on asset criticality

DInclude a step ''Reporting'' to alert the security department of threats identified by the SOAR reporting engine

Show Suggested Answer

Suggested Answer: A

by Kristofer at May 05, 2022, 03:41 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!