CAS-004 practice question 26 of 35
A security engineer has been informed by the firewall team that a specific Windows workstation is part of a command-and-control network. The only…
Choose your answer, then check it against the explanation.
A security engineer has been informed by the firewall team that a specific Windows workstation is
part of a command-and-control network. The only information the security engineer is receiving is
that
the traffic is occurring on a non-standard port (TCP 40322). Which of the following commands should
the security engineer use FIRST to find the malicious process?
Question 26 of 35
Keep practicing
Take the free CAS-004 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CAS-004 practice questions
- Question 1During a review of events, a security analyst notes that several log entries from the FIM…
- Question 2A security engineer is performing a threat modeling procedure against a machine learning …
- Question 3Which of the following security features do email signatures provide?
- Question 4A security analyst is examining a former employee's laptop for suspected evidence of susp…
- Question 6An IT director is working on a solution to meet the challenge of remotely managing laptop…
- Question 7Which of the following is the reason why security engineers often cannot upgrade the secu…