Which of the following sources should the analyst review to BEST ascertain how the incident could have been prevented?

Posted by: Pdfprep Category: SY0-501 Tags: , ,

An analyst has determined that a server was not patched and an external actor exfiltrated data on port 139.

Which of the following sources should the analyst review to BEST ascertain how the incident could have been prevented?
A . The vulnerability scan output
B . The security logs
C . The baseline report
D . The correlation of events

Answer: B

Leave a Reply

Your email address will not be published.