Cisco Performing CyberOps Using Core Security Technologies (CBRCOR) 350-201 Question # 38 Topic 4 Discussion

Cisco Performing CyberOps Using Core Security Technologies (CBRCOR) 350-201 Question # 38 Topic 4 Discussion

350-201 Exam Topic 4 Question 38 Discussion:
Question #: 38
Topic #: 4

A SOC team is investigating a recent, targeted social engineering attack on multiple employees. Cross- correlated log analysis revealed that two hours before the attack, multiple assets received requests on TCP port 79. Which action should be taken by the SOC team to mitigate this attack?


A.

Disable BIND forwarding from the DNS server to avoid reconnaissance.


B.

Disable affected assets and isolate them for further investigation.


C.

Configure affected devices to disable NETRJS protocol.


D.

Configure affected devices to disable the Finger service.


Get Premium 350-201 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.