Want to pass your Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR) 300-215 exam in the very first attempt? Try Pass2lead! It is equally effective for both starters and IT professionals.
VCE
DRAG DROP
Drag and drop the cloud characteristic from the left onto the challenges presented for gathering evidence on the right.
Select and Place:

An engineer is analyzing a ticket for an unexpected server shutdown and discovers that the web-server ran out of useable memory and crashed.
Which data is needed for further investigation?
A. /var/log/access.log
B. /var/log/messages.log
C. /var/log/httpd/messages.log
D. /var/log/httpd/access.log
An organization recovered from a recent ransomware outbreak that resulted in significant business damage. Leadership requested a report that identifies the problems that triggered the incident and the security team's approach to address these problems to prevent a reoccurrence. Which components of the incident should an engineer analyze first for this report?
A. impact and flow
B. cause and effect
C. risk and RPN
D. motive and factors