An organization experienced a sophisticated phishing attack that resulted in the compromise of confidential information from thousands of user accounts. The threat actor used a land and expand approach, where initially accessed account was used to spread emails further. The organization's cybersecurity team must conduct an in-depth root cause analysis to uncover the central factor or factors responsible for the success of the phishing attack. The very first victim of the attack was user with email 500236186@test.com. The primary objective is to formulate effective strategies for preventing similar incidents in the future. What should the cybersecurity engineer prioritize in the root cause analysis report to demonstrate the underlying cause of the incident?

Question

Accepted Answer

A. investigation into the specific vulnerabilities or weaknesses in the organization's email security

Answer

B. evaluation of the organization's incident response procedures and the performance of the incident

Answer

C. examination of the organization's network traffic logs to identify patterns of unusual behavior

Answer

D. comprehensive analysis of the initial user for presence of an insider who gained monetary value

An organization experienced a sophisticated phishing attack that resulted in the compromise of confidential information from thousands of user accounts. The threat actor used a land and expand…

Question

Options

How the community answered

Explanation

Topics

Community Discussion