Refer to the exhibit. A cybersecurity analyst is investigating a reported security incident on a Microsoft Windows computer. Which tool is the analyst using?
- Event Viewer
- PowerShell
- Task Manager
- Performance Monitor
Explanation: Event Viewer is used to investigate the history of application, security, and system events. Events show the date and time that the event occurred along with the source of the event. If a cybersecurity analyst has the address of the Windows computer targeted and/or the date and time that a security breach occurred, the analyst could use Event Viewer to document and prove what occurred on the computer.
Exam with this question: CCNA Cyber Ops (v1.1) – Chapter 2 Exam Answers
Please login or Register to submit your answer