A server was recently compromised. A security analyst needs to collect artifacts for further analysis before disconnecting the server from the network. Which of the following artifacts should the analyst collect first?

A team lead asks an analyst to integrate multiple security tools to provide an enhanced view into data that is not readily available in the tool console. Which of the following will best meet this requirement?

An analyst needs to perform a baseline security evaluation of the company's cloud infrastructure.
Which of the following tools is most appropriate for this task?

Which of the following phases of the incident response process will permanently remove an attacker's access to corporate resources?

Hotspot Question
A systems administrator is reviewing the output of a vulnerability scan.
INSTRUCTIONS
Review the information in each tab.
Based on the organization's environment architecture and remediation standards, select the server to be patched within 14 days and select the appropriate technique and mitigation.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.