nerdexam
EC-Council

312-39 · Question #149

Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry: May 06 2018 21:27:27 asa 1: %ASA -5 - 11008: User 'enable_15' executed the 'c

Sign in or unlock 312-39 to reveal the answer and full explanation for question #149. The question stem and answer options stay visible for context.

Security Incident Detection

Question

Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry:

May 06 2018 21:27:27 asa 1: %ASA -5 – 11008: User 'enable_15' executed the 'configure term' command What does the security level in the above log indicates?

Options

  • AWarning condition message
  • BCritical condition message
  • CNormal but significant message
  • DInformational message

Unlock 312-39 to see the answer

You've previewed enough free 312-39 questions. Unlock 312-39 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Cisco ASA logs#syslog severity levels#firewall log analysis#log interpretation
Full 312-39 Practice