Which of the following would MOST likely show where the malware originated?

exams SY0-601 SY0-601 exam 0 Comments

A host was infected with malware. During the incident response, Joe, a user, reported that he did not receive any emails with links, but he had been browsing the Internet all day.

Which of the following would MOST likely show where the malware originated?
A . The DNS logs
B . The web server logs
C . The SIP traffic logs
D . The SNMP logs

Answer: A