Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA Exam SY0-601 Topic 1 Question 85 Discussion

Actual exam question for CompTIA's SY0-601 exam
Question #: 85
Topic #: 1
[All SY0-601 Questions]

A security analyst is assessing several company firewalls. Which of the following tools would the analyst most likely use to generate custom packets to use during the assessment?

Show Suggested Answer Hide Answer
Suggested Answer: B

A runbook is a set of predefined procedures and steps that guide an incident response team through the process of handling a security incident.It can help the blue team respond quickly and effectively to an indicator of compromise (IOC) by following the best practices and predefined actions for containment, eradication, recovery and lessons learned.


by Rickie at Jun 29, 2024, 02:29 AM

Limited Time Offer

25%

Off

Get Premium SY0-601 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Edison
9 months ago
I think conducting forensics on the compromised system is also important to understand the extent of the breach.
upvoted 0 times
...
Gwenn
9 months ago
I agree with Desiree, activating runbooks will help them respond quickly and effectively.
upvoted 0 times
...
Isadora
9 months ago
D) Conduct passive reconnaissance to gather information. Sounds like a good way to get caught with your pants down!
upvoted 0 times
Marlon
8 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Joana
8 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...
Desiree
9 months ago
I believe they should activate runbooks for incident response.
upvoted 0 times
...
Page
9 months ago
What do you think the blue team should do after detecting an IOC?
upvoted 0 times
...
Katina
9 months ago
A) Reimage the impacted workstations. Nah, gotta dig deeper and find the root cause first.
upvoted 0 times
...
Ira
9 months ago
B) Activate runbooks for incident response. Gotta get that incident response plan in motion, stat!
upvoted 0 times
Alexis
8 months ago
D) Conduct passive reconnaissance to gather information.
upvoted 0 times
...
Cheryll
8 months ago
C) Conduct forensics on the compromised system.
upvoted 0 times
...
Gail
8 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Ming
8 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...
Kallie
9 months ago
C) Conduct forensics on the compromised system. That's the logical next step after detecting an IOC.
upvoted 0 times
Frank
8 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Stephanie
9 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
Erick
9 months ago
B) Activate runbooks for incident response.
upvoted 0 times
...
Jani
9 months ago
A) Reimage the impacted workstations.
upvoted 0 times
...
...

Save Cancel