EC-Council
312-50V11 · Question #73
312-50V11 Question #73: Real Exam Question with Answer & Explanation
Sign in or unlock 312-50V11 to reveal the answer and full explanation for question #73. The question stem and answer options stay visible for context.
Question
You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are staring an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?
Options
- AEvent logs on the PC
- BInternet Firewall/Proxy log
- CIDS log
- DEvent logs on domain controller
Unlock 312-50V11 to see the answer
You've previewed enough free 312-50V11 questions. Unlock 312-50V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.