Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 327

Which two elements are assets in the role of attribution in an investigation? (Choose two.)

Answer options

• A. context
• B. session
• C. laptop
• D. firewall logs
• E. threat actor

Correct answer: C, D

Explanation

The correct answers, C (laptop) and D (firewall logs), are tangible assets that can provide crucial evidence and context in identifying the source of an attack. Options A (context) and B (session) are important for understanding the situation but do not function as physical or log-based assets. Option E (threat actor) refers to the perpetrator rather than an asset used in the investigation.