Free 300-215 Web TestEngine Demo

Q6 Single choice

During a routine inspection of system logs, a security analyst notices an entry where Microsoft Word initiated a PowerShell command with encoded arguments.
Given that the user's role does not involve scripting or advanced document processing, which action should the analyst take to analyze this output for potential indicators of compromise?

A
Monitor the Microsoft Word startup times to ensure they align with business hours.
B
Confirm that the Microsoft Word license is valid and the application is updated to the latest version.
C
Validate the frequency of PowerShell usage across all hosts to establish a baseline.
D
Review the encoded PowerShell arguments to decode and determine the intent of the script.

300-215 Web TestEngine demo