ExamFreeIT Certification Practice, Made Simple

Preparing Practice Exam…

Please wait a moment while the system generates the exam questions, answers, and study session.

ExamFree

Free practice questions with explanations for AWS, Microsoft, CompTIA, Google Cloud, PMI, and more.

Explore

Browse All Exams
About ExamFree
Report a Question

Providers

Microsoft practice exams
Google Cloud practice exams
CompTIA practice exams
PMI practice exams
AWS practice exams
Databricks practice exams
Cisco practice exams
Snowflake practice exams
Anthropic practice exams
Linux Foundation practice exams
HashiCorp practice exams
ITIL practice exams
Red Hat practice exams

© 2026 ExamFree. ExamFree is an independent practice platform and is not affiliated with or endorsed by AWS, Microsoft, Google, CompTIA, PMI, or any certification provider. All certification names and trademarks belong to their respective owners.

200-201 Question 168: The SOC team has confirmed a potential indicator of… | ExamFree

Home/Cisco/200-201/Question 168

200-201 Question 168

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) · Cisco

Previous Next

168

Question 168

View question permalink page

The SOC team has confirmed a potential indicator of compromise on an endpoint. The team has narrowed the executable file's type to a new trojan family. According to the NIST Computer Security Incident Handling Guide, what is the next step in handling this event?

Select one answer.

Purchase Full Access to view answer options & explanation

The first 166 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 552 questions.

Unlock Full Access Try Free Preview (Q1–Q166)

Continue in Practice Mode for 200-201