A laptop that is company owned and managed is suspected to have malware. The company implemented centralized security logging. Which of the following log sources will confirm the malware infection?

The correct answer is A. XDR logs. XDR logs will confirm the malware infection because XDR is a system that collects and analyzes data from multiple sources, such as endpoints, networks, cloud applications, and email security, to detect and respond to advanced threats12. XDR can provide a comprehensive view of…

Submitted by packet_pusher· Mar 6, 2026Security operations

Question

Options

AXDR logs
BFirewall legs
CIDS logs
DMFA logs

How the community answered

(38 responses)

A
74% (28)
B
16% (6)
C
8% (3)
D
3% (1)

Explanation

XDR logs will confirm the malware infection because XDR is a system that collects and analyzes data from multiple sources, such as endpoints, networks, cloud applications, and email security, to detect and respond to advanced threats12. XDR can provide a comprehensive view of the attack chain and the context of the malware infection. Firewall logs, IDS logs, and MFA logs are not sufficient to confirm the malware infection, as they only provide partial or indirect information about the network traffic, intrusion attempts, or user authentication.

Topics

#Malware detection#XDR#Centralized logging#Endpoint security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice