The highlighted incident (arrow shown in the exhibit) shows a progression level of "Download" in the kill chain. What are two appropriate mitigation actions for the selected incident? (Choose two.)

Question

Options

• AImmediate response required: Block malware IP addresses (download server or CnC server)
• BImmediate response required: Wipe infected endpoint hosts.
• CImmediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.
• DNot an urgent action: Use IVP to confirm if machine is infected.

• A
  20% (10)
• B
  73% (37)
• C
  8% (4)

No community discussion yet for this question.