Given a scenario, use appropriate data sources to support investigation.
3 practice questions under this official exam objective (SY0-701) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Which Logs Identify a Host Impacted by a Command-and-Control Server?
Analyzing network and firewall logs is the correct approach to identify a host communicating with a command-and-control server in Security+ SY0-701 sc
SIEM Investigation: Executable Analysis Log Source
When investigating suspicious executables on a corporate laptop, the endpoint log is the definitive data source for process and file details. This pag
Which Data Type Should Have Reduced Retention for Investigations?
A global security team can cut investigation data storage costs most effectively by reducing packet capture retention, because full traffic captures a