A Or D ??? 

A security analyst is trying to identify the source of a recent data loss incident. The analyst has reviewed all the logs the time surrounding the incident and identified all the assets on the network at the time of the data loss. The analyst suspect the key to finding the source was obfuscated in an application. Which of the following should the analyst use NEXT?

1. Software decomplier
2. Network enumerator
3. Log reduction and analysis tool
4. Static code analysis
5.  

Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and users. The network generates more than 10,000 log messages per second. The enterprise belong to a large, web-based cryptocurrency startup, Ann has distilled the relevant information into an easily digestible report for executive management . However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information?

Options:

A Traffic interceptor log analysis
B Log reduction and visualization tools
C Proof of work analysis
D Ledger analysis software

A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization.

Which of the following should be the analyst's FIRST action?

Options:

A Create a full inventory of information and data assets.
B Ascertain the impact of an attack on the availability of crucial resources.
C Determine which security compliance standards should be followed.
D Perform a full system penetration test to determine the vulnerabilities.

Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information?

1. Traffic interceptor log analysis
2. Log reduction and visualization tools
3. Proof of work analysis
4. Ledger analysis software

Ans A : And Justification 

ANS A. Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information :-

- Traffic interceptor log analysis

Ans Option B

Log reduction and visualization tools

Based on the given information this is the correct answer

Ans : correct answer is proof of work analysis

because when Ann has distilled the relevant information into an easily digestable report for executive manager then their is a need to be any proof of that incident to be post on a network and basically several hundred virtual servers are connected and cryptocurrency startup so, proof of work analysis plays an important role here.

confused : Please suggest