A security analyst is conducting a post-incident log analysis to determine which indicators can be used to detect further occurrences of a data exfiltration incident. The analyst determines backups were not performed during this time and reviews the following: Which of the following should the analyst review to find out how the data was exfiltrated?
A) Monday's logs
B) Tuesday's logs
C) Wednesday's logs
D) Thursday's logs

Question

A security analyst is conducting a post-incident log analysis to determine which indicators can be used to detect further occurrences of a data exfiltration incident. The analyst determines backups were not performed during this time and reviews the following:  Which of the following should the analyst review to find out how the data was exfiltrated?
A) Monday's logs 
B) Tuesday's logs 
C) Wednesday's logs 
D) Thursday's logs

Quizplus · Accepted Answer

The Answer of A security analyst is conducting a post-incident log analysis to determine which indicators can be used to detect further occurrences of a data exfiltration incident. The analyst determines backups were not performed during this time and reviews the following:  Which of the following should the analyst review to find out how the data was exfiltrated?
A) Monday's logs 
B) Tuesday's logs 
C) Wednesday's logs 
D) Thursday's logs

A Security Analyst Is Conducting a Post-Incident Log Analysis to Determine