300-215 · Question #79
300-215 Question #79: Real Exam Question with Answer & Explanation
Sign in or unlock 300-215 to reveal the answer and full explanation for question #79. The question stem and answer options stay visible for context.
Question
Data has been exfiltrated and advertised for sale on the dark web. Incident Response has narrowed down which server has been accessed by the threat actor based on the event logs. On the call with IT team, one of the engineers mentions these observations around this particular web server: - The database running on the server has become unresponsive. - The PageFile.sys size is consistently changing. - The server's disk usage peaks during CPU spikes. - The Performance Monitor indicates high page faults during these spikes. Which action should the IR team perform on the server?
Options
- AReview the database.log file in the program files directory for database errors
- BExamine the system.cfg file in the Windows directory for improper system configurations
- CAnalyze the PageFile.sys file in the System Drive and the Virtual Memory configuration
- DCheck the Memory.dmp file in the Windows directory for memory leak indications
Unlock 300-215 to see the answer
You've previewed enough free 300-215 questions. Unlock 300-215 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.