A technician receives the following security alert from the firewall's automated system:
After reviewing the alert, which of the following is the BEST analysis?
A Technician Re 1 (161.85 KiB) Viewed 66 times
A. This alert is a false positive because DNS is a normal network function.
B. This alert indicates a user was attempting to bypass security measures using dynamic DNS.
C. This alert was generated by the SIEM because the user attempted too many invalid login attempts.
D. This alert indicates an endpoint may be infected and is potentially contacting a suspect host.
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!