Cisco Exam 300-215 Topic 4 Question 85 Discussion

Actual exam question for Cisco's 300-215 exam

Question #: 85
Topic #: 4

A security team detected an above-average amount of inbound tcp/135 connection attempts from unidentified senders. The security team is responding based on their incident response playbook. Which two elements are part of the eradication phase for this incident? (Choose two.)

Aanti-malware software

Bdata and workload isolation

Ccentralized user management

Dintrusion prevention system

Eenterprise block listing solution

Show Suggested Answer

Suggested Answer: A

by Wayne at Sep 15, 2024, 01:10 AM

Limited Time Offer

25%

Off

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leontine

3 days ago

I think the answer is B and D. Isolating the affected data and systems, and using an IPS to detect and prevent further intrusions sound like the right steps for the eradication phase.

upvoted 0 times

...