An incident responder was asked to analyze malicious traffic. Which of the following tools would be BEST for this?

An incident response team is concerned with verifying the integrity of security information and event management (SIEM) events after being written to disk. Which of the following represents the BEST option for addressing this concern?

During the forensic analysis of a compromised computer image, the investigator found that critical files are missing, caches have been cleared, and the history and event log files are empty. According to this scenario, which of the following techniques is the suspect using?

While planning a vulnerability assessment on a computer network, which of the following is essential?
(Choose two.)

Senior management has stated that antivirus software must be installed on all employee workstations. Which of the following does this statement BEST describe?