During an investigation, a security analyst discovers traffic going out to a command-and-control server. The analyst must find out if any data exfiltration has occurred. Which of the following would b

The correct answer is D. Packet capture. Packet capture provides a detailed record of network traffic, allowing analysts to inspect the actual contents of communications to determine if sensitive data was exfiltrated to a command- and-control server.

Submitted by paula_co· Mar 6, 2026Security Operations

Question

During an investigation, a security analyst discovers traffic going out to a command-and-control server. The analyst must find out if any data exfiltration has occurred. Which of the following would best help the analyst determine this?

Options

AApplication log
BMetadata
CNetwork log
DPacket capture

How the community answered

(52 responses)

A
6% (3)
B
4% (2)
C
15% (8)
D
75% (39)

Explanation

Packet capture provides a detailed record of network traffic, allowing analysts to inspect the actual contents of communications to determine if sensitive data was exfiltrated to a command- and-control server.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice