Refer to the exhibit.

An analyst was given a PCAP file, which is associated with a recent intrusion event in the company FTP server Which display filters should the analyst use to filter the FTP traffic?

An engineer needs to have visibility on TCP bandwidth usage, response time, and latency, combined with deep packet inspection to identify unknown software by its network traffic flow. Which two features of Cisco Application Visibility and Control should the engineer use to accomplish this goal? (Choose two.)

What does an attacker use to determine which network ports are listening on a potential target device?

Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)

What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?