nerdexam
CompTIA

CS0-003 · Question #268

An analyst is reviewing system logs while threat hunting: Which of the following hosts should be investigated first?

The correct answer is C. PC3. User gets a malicious Excel file via email and when opened Excel opens "procdunp.exe".

Submitted by minji_kr· Mar 6, 2026Security operations

Question

An analyst is reviewing system logs while threat hunting:

Which of the following hosts should be investigated first?

Exhibit

CS0-003 question #268 exhibit

Options

  • APC1
  • BPC2
  • CPC3
  • DPC4
  • EPC5

How the community answered

(17 responses)
  • A
    24% (4)
  • B
    12% (2)
  • C
    59% (10)
  • E
    6% (1)

Explanation

User gets a malicious Excel file via email and when opened Excel opens "procdunp.exe".

Topics

#Threat hunting#Log analysis#Incident prioritization#Security operations

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice