Multiple Choice
A security analyst observes the following events in the logs of an employee workstation:
Given the information provided, which of the following MOST likely occurred on the workstation?
A) Application whitelisting controls blocked an exploit payload from executing.
B) Antivirus software found and quarantined three malware files.
C) Automatic updates were initiated but failed because they had not been approved.
D) The SIEM log agent was not tuned properly and reported a false positive.
Correct Answer:

Verified
Correct Answer:
Verified
Q401: Which of the following is the LEAST
Q402: An organization's employees currently use three different
Q403: A small enterprise decides to implement a
Q404: A security administrator is performing a risk
Q405: A director of IR is reviewing a
Q407: A help desk is troubleshooting user reports
Q408: A network administrator was concerned during an
Q409: The SSID broadcast for a wireless router
Q410: A datacenter engineer wants to ensure an
Q411: A security engineer is configuring a system