اضغط هنا للانضمام الى قروب فوجي للإختبارات على تيليقرام

اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 1013 من 1040

كل الأسئلة

A SOC receives multiple alerts related to a cloud tenant and needs to identify the initial compromise. What should the analyst do first?

الخيارات

  • A Search audit logs for all activity under project staging-01 and correlate actions against VM ed0if34.
  • B Search audit logs for user jdoe12@myorg.com and correlate the successful API requests on project staging-01.
  • C Review audit logs for any successful compute instance actions targeting project staging-01 during the alert window.
  • D Review logs for audit actions targeting compute instance APIs during the alert window on VM fd031f.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.