nerdexam
CiscoCisco

300-215 · Question #87

300-215 Question #87: Real Exam Question with Answer & Explanation

Sign in or unlock 300-215 to reveal the answer and full explanation for question #87. The question stem and answer options stay visible for context.

Submitted by haruto_sh· Mar 6, 2026Incident Response Processes

Question

Refer to the exhibit. A company employee receives an email from a customer. The email includes a Microsoft Word attachment. The moment the employee opens the attachment, the workstation begins to act strangely and unusual pop-ups appear. That day, another workstation in the same department demonstrates the same behavior. The security administrator examines the first workstation (Patient 0) in a sandbox environment and spots some threats. What must the administrator determine next?

Options

  • Aif Patient 0 still demonstrates suspicious behavior
  • Bsource code of the malicious attachment
  • Cif the file in Patient 0 is encrypted
  • Dif Patient 0 tried to connect to another workstation

Unlock 300-215 to see the answer

You've previewed enough free 300-215 questions. Unlock 300-215 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Incident Response#Malware Analysis#Lateral Movement#Threat Containment
Full 300-215 PracticeBrowse All 300-215 Questions