CompTIA Exam CS0-001 Topic 10 Question 13 Discussion

Actual exam question for CompTIA's CS0-001 exam

Question #: 13
Topic #: 10

A security analyst is Investigating some unusual network traffic to and from one or the company's email servers. Reviewing a packet capture, the analyst notes the following sequence of packets:

Which of the following should be the NEXT step In the Investigation?

ALog on to the server at IP address 74.125.131.27 and determine the process using port 80.

BLog on to the server at IP address 74.125.131.27 and determine the process using port 25.

CCheck with the network team to see if the IP address 67.35.20.70 has connected to any other servers.

DAsk the network team to blackhole the IP address 153.22.17.8 to prevent further connections.

Show Suggested Answer

Suggested Answer: B

by Rickie at May 06, 2022, 06:43 AM

Limited Time Offer

25%

Off

Get Premium CS0-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!