After reviewing the alert, which of the following is the BEST analysis?

A technician receives the following security alert from the firewall’s automated system:

After reviewing the alert, which of the following is the BEST analysis?
A . This alert is false positive because DNS is a normal network function.
B . This alert indicates a user was attempting to bypass security measures using dynamic DN
D . This alert was generated by the SIEM because the user attempted too many invalid login attempts.
E . This alert indicates an endpoint may be infected and is potentially contacting a suspect host.

View Answer

Answer: B