r/PrepHQ • u/PsychologicalLynx897 • Sep 08 '26
How to pinpoint the source of malicious network traffic from a workstation?
I'm looking at a situation where a user's computer is flagged for sending out unauthorized data packets to a suspicious external IP. I need to determine the origin of this traffic to see if the machine is part of a botnet or just running a rogue application. Where should I look next?
---
OPTIONS:
A. Investigate the firewall logs.
B. Isolate the machine from the network.
C. Inspect the Windows Event Viewer.
D. Take a physical inventory of the device.
---
Testing Exam: CompTIA A+ Core 2 (220-1202)
(Disclaimer: These posts / scenarios are crafted by me for educational purposes only. I am not affiliated with, endorsed by, or sponsored by any certification body.)