Cisco
350-201 · Question #120
350-201 Question #120: Real Exam Question with Answer & Explanation
Sign in or unlock 350-201 to reveal the answer and full explanation for question #120. The question stem and answer options stay visible for context.
Question
An engineer detects an intrusion event inside an organization's network and becomes aware that files that contain personal data have been accessed. Which action must be taken to contain this attack?
Options
- ADisconnect the affected server from the network.
- BAnalyze the source.
- CAccess the affected server to confirm compromised files are encrypted.
- DDetermine the attack surface.
Unlock 350-201 to see the answer
You've previewed enough free 350-201 questions. Unlock 350-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.