350-201 practice question 7 of 25
A SIEM tool fires an alert about a VPN connection attempt from an unusual location. The incident response team validates that an attacker has…
Choose your answer, then check it against the explanation.
A SIEM tool fires an alert about a VPN connection attempt from an unusual location. The incident
response team validates that an attacker has installed a remote access tool on a user’s laptop while
traveling. The attacker has the user’s credentials and is attempting to connect to the network.
What is the next step in handling the incident?
Question 7 of 25
Keep practicing
Take the free 350-201 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 350-201 practice questions
- Question 1According to GDPR, what should be done with data to ensure its confidentiality, integrity…
- Question 2A security incident affected an organization’s critical business services, and the custom…
- Question 3An organization had an incident with the network availability during which devices unexpe…
- Question 4An organization installed a new application server for IP phones. An automated process fe…
- Question 6What is a limitation of cyber security risk insurance?
- Question 8An audit is assessing a small business that is selling automotive parts and diagnostic se…