CompTIA Exam CS0-002 Topic 5 Question 14 Discussion

Actual exam question for CompTIA's CS0-002 exam

Question #: 14
Topic #: 5

During an investigation, an analyst discovers the following rule in an executive's email client:

IF * TO THEN mailto:

SELECT FROM 'sent' THEN DELETE FROM

The executive is not aware of this rule. Which of the following should the analyst do FIRST to evaluate the potential impact of this security incident?

ACheck the server logs to evaluate which emails were sent to <someaddress@domain.com>

BUse the SIEM to correlate logging events from the email server and the domain server

CRemove the rule from the email client and change the password

DRecommend that management implement SPF and DKIM

Show Suggested Answer

Suggested Answer: A

by Lemuel at May 08, 2022, 02:00 PM

Limited Time Offer

25%

Off

Get Premium CS0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!