What is the role of indicator of compromise in an investigation?

The correct answer is B. It identifies potentially malicious activity on a system or network. An Indicator of Compromise (IOC) is evidence that suggests a system or network may have been breached. IOCs include suspicious file hashes, IP addresses, domain names, unusual network traffic, and unauthorized system modifications. Security analysts use IOCs to detect and…

Submitted by katya_ua· Mar 6, 2026Security Monitoring

Question

Options

AIt helps answer the question of why the attack took place.
BIt identifies potentially malicious activity on a system or network.
CIt is nonforensic data, which is easy to detect.
DIt describes what and why something happened.

How the community answered

(43 responses)

A
2% (1)
B
93% (40)
C
5% (2)

Explanation

An Indicator of Compromise (IOC) is evidence that suggests a system or network may have been breached. IOCs include suspicious file hashes, IP addresses, domain names, unusual network traffic, and unauthorized system modifications. Security analysts use IOCs to detect and respond to threats before they escalate into full-blown incidents.

Topics

#IOC#incident response#threat detection#malicious activity

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice