300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity

By Cisco · Question Mode

QuestionQ12

Incident Response Techniques

An engineer receives a call to help with an active DDoS attack. The Apache server is the target, and its availability is affected. Which action should be performed to determine the threat’s origin?

Explanation

Apache access logs record incoming HTTP requests, including the originating client IP address. Inspecting the most recent access-log entries helps identify the sources responsible for abnormal request traffic.

Community Discussion

No comments yet. Be the first to start the discussion!