A SOC engineer discovers that the organization had three DDOS attacks overnight. Four servers are reported offline, even though the hardware seems to be working as expected. One of the offline servers is affecting the pay system reporting times. Three employees, including executive management, have reported ransomware on their laptops. Which steps help the engineer understand a comprehensive overview of the incident?

What is the HTTP response code when the REST API information requested by the authenticated user cannot be found?

Refer to the exhibit.

Which indicator of compromise is represented by this STIX?

A security engineer discovers that a spreadsheet containing confidential information for nine of their employees was fraudulently posted on a competitor's website. The spreadsheet contains names, salaries, and social security numbers. What is the next step the engineer should take in this investigation?

Drag and drop the threat from the left onto the scenario that introduces the threat on the right. Not all options are used.