Question 1
(Topic 1)
What is the first action a security analyst should take when beginning to review and prioritize alerts from Targeted Attack Protection (TAP)? Reveal Solution Hide Solution Discussion Correct Answer: A 🗳️
Select an option, then click Submit answer.
- ○ Use filtering options on the TAP Threats page to organize and prioritize threat alerts.
- ○ Assess claims of false positives by analyzing forensic details and threat indicators.
- ○ Open and examine the contents of an email using the associated .eml file.
- ○ Investigate false negatives by identifying root causes in source policy configurations.
