Cisco
600-199 · Question #13
If an alert that pertains to a remote code execution attempt is seen on your network, which step is unlikely to help?
The correct answer is D. clearing the event store to see if future events indicate malicious activity. See the full explanation below for the reasoning.
Question
If an alert that pertains to a remote code execution attempt is seen on your network, which step is unlikely to help?
Options
- Alooking for anomalous traffic
- Blooking for reconnaissance activity
- Crestoring the machine to a known good backup
- Dclearing the event store to see if future events indicate malicious activity
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C12% (3)
- D81% (21)
Community Discussion
No community discussion yet for this question.