A security team received an alert of suspicious activity on a user's Internet browser. The user's anti-virus software indicated that the file attempted to create a fake recycle bin folder and connect to an external IP address. Which two actions should be taken by the security analyst with the executable file for further analysis? (Choose two.)
A) Evaluate the process activity in Cisco Umbrella.
B) Analyze the TCP/IP Streams in Cisco Secure Malware Analytics (Threat Grid).
C) Evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid).
D) Analyze the Magic File type in Cisco Umbrella.
E) Network Exit Localization in Cisco Secure Malware Analytics (Threat Grid).

Question

Quizplus · Accepted Answer

The security analyst should analyze the TCP/IP Streams and evaluate the behavioral indicators in Cisco Secure Malware Analytics (Threat Grid) to understand the network behavior and potential malicious activities of the executable file.

A Security Team Received an Alert of Suspicious Activity on a User's