CS0-003 · Question #111
A security analyst is investigating an incident related to an alert from the threat detection platform on a host (10.0.1.25) in a staging environment that could be running a cryptomining tool because
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #111. The question stem and answer options stay visible for context.
Question
A security analyst is investigating an incident related to an alert from the threat detection platform on a host (10.0.1.25) in a staging environment that could be running a cryptomining tool because it is sending traffic to an IP address that is related to Bitcoin. The network rules for the instance are the following:
Which of the following is the BEST way to isolate and triage the host?
Exhibit
Options
- ARemove rules 1, 2, and 3.
- BRemove rules 1, 2, 4, and 5.
- CRemove rules 1, 2, 3, 4, and 5.
- DRemove rules 1, 2, and 5.
- ERemove rules 1, 4, and 5.
- FRemove rules 4 and 5.
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.