Exam CS0-002 topic 1 question 349 discussion

Actual exam question from CompTIA's CS0-002

Question #: 349
Topic #: 1

A security analyst s monitoring a company’s network traffic and finds ping requests going to accounting and human resources servers from a SQL server. Upon investigation, the analyst discovers a technician responded to potential network connectivity issues. Which of the following is the best way for the security analyst to respond?

A. Report this activity as a false positive, as the activity is legitimate.
B. Isolate the system and begin a forensic investigation to determine what was compromised.
C. Recommend network segmentation to the management team as a way to secure the various environments.
D. Implement host-bases firewalls on all systems to prevent ping sweeps in the future.

Show Suggested Answer

Suggested Answer: A 🗳️

by CyberCEH at May 21, 2023, 12:31 p.m.