CompTIA
CLO-002 · Question #360
An incident response team requires documentation for an email phishing campaign against a company's email server. Which of the following is the BEST resource to use to start the investigation?
The correct answer is A. Audit and system logs. See the full explanation below for the reasoning.
Question
An incident response team requires documentation for an email phishing campaign against a company's email server. Which of the following is the BEST resource to use to start the investigation?
Options
- AAudit and system logs
- BChange management procedures
- CDepartmental policies
- DStandard operating procedures
How the community answered
(42 responses)- A76% (32)
- B10% (4)
- C12% (5)
- D2% (1)
Community Discussion
No community discussion yet for this question.