200-201 Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
Which step in the incident response process researches an attacking host through logs in a SIEM?
- A . detection and analysis
- B . preparation
- C . eradication
- D . containment