nerdexam
CompTIA

CAS-005 · Question #167

A security analyst detects a possible RAT infection on a computer in the internal network. After reviewing the details of the alert, the analyst identifies the initial vector of the attack was an emai

Sign in or unlock CAS-005 to reveal the answer and full explanation for question #167. The question stem and answer options stay visible for context.

Submitted by eva_at· Mar 6, 2026Security Operations

Question

A security analyst detects a possible RAT infection on a computer in the internal network. After reviewing the details of the alert, the analyst identifies the initial vector of the attack was an email that was forwarded to multiple recipients in the same organizational unit. Which of the following should the analyst do first to minimize this type of threat in the future?

Options

  • AMove from an anti-malware software to an EDR solution.
  • BPerform a penetration test to detect technology gaps on the anti-spam solution.
  • CConfigure an IPS solution in the internal network to mitigate infections.
  • DImplement a security awareness program in the organization.

Unlock CAS-005 to see the answer

You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full CAS-005 Practice