Which tool would an analyst use to start a workflow investigation?
- ELSA
- Bro
- Sguil
- Snort
Explanation: Sguil is a GUI-based application used by security analysts to analyze network security events.
Related exam: CCNA Cyber Ops Chapter 12 Exam Answers
Related exam: CyberOps Associate (Version 1.0) - Module 26: Evaluating Alerts Quiz Answers
Related exam: CyberOps Associate (Version 1.0) - Module 27: Working with Network Security Data Quiz Answers
Related exam: Network Defense Module 11.3.2 Evaluating Alerts Quiz
