Cisco Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR) 300-215 Question # 29 Topic 3 Discussion

Cisco Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR) 300-215 Question # 29 Topic 3 Discussion

300-215 Exam Topic 3 Question 29 Discussion:
Question #: 29
Topic #: 3

A cybersecurity analyst must identify an unknown service causing high CPU on a Windows server. What tool should be used?


A.

Volatility to analyze memory dumps for forensic investigation


B.

Process Explorer from the Sysinternals Suite to monitor and examine active processes


C.

TCPdump to capture and analyze network packets


D.

SIFT (SANS Investigative Forensic Toolkit) for comprehensive digital forensics


Get Premium 300-215 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.