SY0-701 · Question #670
A SOC analyst establishes a remote control session on an end user's machine and discovers the following in a file: gmail.com[ENT][email protected][ENT]NoOneCanGuessThis123! [ENT]Hello Susan, it was gr
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #670. The question stem and answer options stay visible for context.
Question
A SOC analyst establishes a remote control session on an end user's machine and discovers the following in a file:
gmail.com[ENT][email protected][ENT]NoOneCanGuessThis123! [ENT]Hello Susan, it was great to see you the other day! Let's plan a followup[BACKSPACE]follow-up meeting soon. Here is the link to register. [RTN][CTRL]c [CTRL]v [RTN]after[BACKSPACE]After you register give me a call on my cellphone. Which of the following actions should the SOC analyst perform first?
Options
- AAdvise the user to change passwords.
- BReimage the end user's machine.
- CCheck the policy on personal email at work.
- DCheck host firewall logs.
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.