Exam CS0-003 Topic 4 Question 173 Discussion
Actual exam question for CompTIA's CS0-003 exam
Question #: 173
Topic #: 4
Question #: 173
Topic #: 4
A security analyst is investigating an incident related to an alert from the threat detection platform on a host (10.0.1.25) in a staging environment that could be running a cryptomining tool because it is sending traffic to an IP address that is related to Bitcoin.
The network rules for the instance are the following:

Which of the following is the BEST way to isolate and triage the host?
The network rules for the instance are the following:

Which of the following is the BEST way to isolate and triage the host?
Suggested Answer: A Vote an answer
by Phil at Mar 29, 2025, 09:28 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).