Cisco Exam 300-215 Topic 4 Question 85 Discussion

Actual exam question for Cisco's 300-215 exam

Question #: 85
Topic #: 4

A security team detected an above-average amount of inbound tcp/135 connection attempts from unidentified senders. The security team is responding based on their incident response playbook. Which two elements are part of the eradication phase for this incident? (Choose two.)

Aanti-malware software

Bdata and workload isolation

Ccentralized user management

Dintrusion prevention system

Eenterprise block listing solution

Show Suggested Answer

Suggested Answer: A

by Wayne at Sep 15, 2024, 01:10 AM

Limited Time Offer

25%

Off

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nidia

1 months ago

I bet the security team is wishing they had a solid firewall in place to block those TCP/135 connection attempts. Guess they'll have to settle for an IPS instead. *chuckles*

upvoted 0 times

An

2 days ago

B: Yeah, an IPS will have to do the job for now.

upvoted 0 times

...

Elliot

6 days ago

A: They definitely need a strong firewall to block those connection attempts.

upvoted 0 times

...

Martina

1 months ago

B and D, no doubt! Gotta isolate that infected data and use the IPS to block those pesky TCP/135 connection attempts. Easy peasy, lemon squeezy!

upvoted 0 times

...

Richelle

1 months ago

Hmm, this is a tricky one. I'm leaning towards B and D, but I'm also wondering if C might be relevant for the eradication phase. I'll have to think this through a bit more.

upvoted 0 times

...

Elza

2 months ago

I'm not sure about this one. I was thinking A and E might be the right answers, but I'm not confident. Guess I need to review my incident response playbook again.

upvoted 0 times

Matt

2 days ago

E) enterprise block listing solution

upvoted 0 times

...

Hyman

3 days ago

B) data and workload isolation

upvoted 0 times

...

Rosina

13 days ago

Those are the correct choices for the eradication phase. Good job!

upvoted 0 times

...

Cordie

14 days ago

D) intrusion prevention system

upvoted 0 times

...

Genevive

20 days ago

A) anti-malware software

upvoted 0 times

...

Leontine

2 months ago

I think the answer is B and D. Isolating the affected data and systems, and using an IPS to detect and prevent further intrusions sound like the right steps for the eradication phase.

upvoted 0 times