CS0-002 Exam Question 166
A contained section of a building is unable to connect to the Internet A security analyst. A security analyst investigates me issue but does not see any connections to the corporate web proxy However the analyst does notice a small spike in traffic to the Internet. The help desk technician verifies all users are connected to the connect SSID. but there are two of the same SSIDs listed in the network connections. Which of the following BEST describes what is occurring?
CS0-002 Exam Question 167
A security analyst is investigating a compromised Linux server. The analyst issues the ps command and receives the following output.
Which of the following commands should the administrator run NEXT to further analyze the compromised system?
Which of the following commands should the administrator run NEXT to further analyze the compromised system?
CS0-002 Exam Question 168
During an investigation, a computer is being seized. Which of the following is the FIRST step the analyst should take?
CS0-002 Exam Question 169
Which of the following principles describes how a security analyst should communicate during an incident?
CS0-002 Exam Question 170
A cyber-incident response team is responding to a network intrusion incident on a hospital network. Which of the following must the team prepare to allow the data to be used in court as evidence?