Exam 350-201 topic 1 question 132 discussion

Actual exam question from Cisco's 350-201

Question #: 132
Topic #: 1

Engineers are working to document, list, and discover all used applications within an organization. During the regular assessment of applications from the HR backup server, an engineer discovered an unknown application. The analysis showed that the application is communicating with external addresses on a non- secure, unencrypted channel. Information gathering revealed that the unknown application does not have an owner and is not being used by a business unit. What are the next two steps the engineers should take in this investigation? (Choose two.)

A. Determine the type of data stored on the affected asset, document the access logs, and engage the incident response team.
B. Identify who installed the application by reviewing the logs and gather a user access log from the HR department.
C. Verify user credentials on the affected asset, modify passwords, and confirm available patches and updates are installed.
D. Initiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

Show Suggested Answer

Suggested Answer: AD 🗳️

by DrVoIP at Feb. 18, 2023, 4:29 p.m.

Comments

Submit Cancel

27ea763

4 months, 4 weeks ago

Selected Answer: AB

I would go with A and B

upvoted 1 times

...

DrVoIP

10 months ago

B. Identify who installed the application by reviewing the logs and gather a user access log from the HR department. D. Initiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner. - ChatGPT

upvoted 1 times

...