What should a security operations engineer do if they are presented with an encoded string during an incident investigation?

exams PCCET V2 PCCET exam 0 Comments

What should a security operations engineer do if they are presented with an encoded string during an incident investigation?
A . Save it to a new file and run it in a sandbox.
B. Run it against VirusTotal.
C. Append it to the investigation notes but do not alter it.
D. Decode the string and continue the investigation.

Answer: D