Exam 200-201 topic 1 question 93 discussion

Actual exam question from Cisco's 200-201

Question #: 93
Topic #: 1

An engineer runs a suspicious file in a sandbox analysis tool to see the outcome. The analysis report shows that outbound callouts were made post infection.
Which two pieces of information from the analysis report are needed to investigate the callouts? (Choose two.)

A. signatures
B. host IP addresses
C. file size
D. dropped files
E. domain names

Show Suggested Answer

Suggested Answer: BE 🗳️

by cvetica at Dec. 29, 2021, 6:28 a.m.

Comments

Submit Cancel

drdecker100

9 months, 2 weeks ago

Selected Answer: BE

The two pieces of information from the analysis report that are needed to investigate the outbound callouts are: B. Host IP addresses - this will give information about the destination of the callouts and can be used to identify potential malicious hosts. E. Domain names - this will give information about the domains contacted during the outbound callouts and can be used to identify potential command-and-control servers or other malicious infrastructure.

upvoted 4 times

...

Eng_ahmedyoussef

1 year, 2 months ago

Selected Answer: BE

B & E host IP addresses and Domain names.

upvoted 1 times

...

cvetica

1 year, 11 months ago

B,E - IP address and domain name

upvoted 1 times

...