Cisco
100-160 · Question #47
100-160 Question #47: Real Exam Question with Answer & Explanation
Sign in or unlock 100-160 to reveal the answer and full explanation for question #47. The question stem and answer options stay visible for context.
Question
A SOC analyst notices repeated failed login attempts from a foreign IP address followed by a successful login to a privileged account. What is the most appropriate next step?
Options
- AReset the affected user's password and investigate the scope of compromise.
- BBlock all foreign IP addresses from accessing the network.
- CRun a full vulnerability scan of the corporate network.
- DIgnore the event unless it happens again.
Unlock 100-160 to see the answer
You've previewed enough free 100-160 questions. Unlock 100-160 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.