CompTIA
SY0-701 · Question #477
A security analyst learns that an attack vector, used as part of a recent incident, was a well- known IoT device exploit. The analyst needs to review logs to identify the time of the initial…
The correct answer is C. Firewall. Firewall logs provide details of all network traffic, including connections to and from IoT devices. They are typically the first source of evidence for identifying the time of an exploit.
Submitted by femi9· Mar 6, 2026Security Operations
Question
A security analyst learns that an attack vector, used as part of a recent incident, was a well- known IoT device exploit. The analyst needs to review logs to identify the time of the initial exploit. Which of the following logs should the analyst review first?
Options
- AEndpoint
- BApplication
- CFirewall
- DNAC
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C81% (21)
- D12% (3)
Explanation
Firewall logs provide details of all network traffic, including connections to and from IoT devices. They are typically the first source of evidence for identifying the time of an exploit.
Community Discussion
No community discussion yet for this question.