Multiple Choice
A security analyst is diagnosing an incident in which a system was compromised from an external IP address. The socket identified on the firewall was traced to 207.46.130.0:6666. Which of the following should the security analyst do to determine if the compromised system still has an active connection?
A) tracert
B) netstat
C) ping
D) nslookup
Correct Answer:
Verified
Correct Answer:
Verified
Q770: A technician must configure a firewall to
Q771: A user typically works remotely over the
Q772: While reviewing the monthly internet usage it
Q773: A security analyst is implementing mobile device
Q774: A security professional wants to test a
Q776: An incident involving a workstation that is
Q777: After attempting to harden a web server,
Q778: A security program manager wants to actively
Q779: A security administrator has replaced the firewall
Q780: Before an infection was detected, several of