CompTIA
CAS-005 · Question #208
A security operation analyst is reviewing the following log entries for suspicious activity: Which of the following should the analyst do first?
Sign in or unlock CAS-005 to reveal the answer and full explanation for question #208. The question stem and answer options stay visible for context.
Submitted by ricky.ec· Mar 6, 2026Security Operations
Question
A security operation analyst is reviewing the following log entries for suspicious activity:
Which of the following should the analyst do first?
Exhibits
Options
- APerform a vulnerability scan on server 192.168.12.4.
- BSearch OSINT on the external IP 104.18.16.29.
- CReview host 192.168.12.56 for malicious software.
- DDisable the guest account on the host 192.168.12.4.
Unlock CAS-005 to see the answer
You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.