Question 1: Ransomware Attack — Live Incident Response
Difficulty: Elite | Role: Cybersecurity Analyst / Incident Responder | Level: Senior / Staff | Company Examples: CrowdStrike, Palo Alto Networks, Microsoft, Mandiant

The Question
At 6:14am on a Monday, your SOC receives an alert from CrowdStrike Falcon: 47 endpoints across 3 office locations...