Multiple choice

Which action could be used to determine ifa host is compromised and flooding traffic the network

  1. Unseat and reconnect the hard drive connectors on the host.

  2. Disconnect the host from the network

  3. Check the host hard drive for errors and file system issues.

  4. Examine the Device Manager on the host for device conflicts.

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Disconnecting the host from the network is an immediate way to isolate the device and observe if the network traffic flood stops. If the network performance improves immediately after disconnection, it confirms that the specific host was the source of the traffic.