300-215 Exam Dumps : Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR v1.2)

Using a different IP address to disguise the origin of an attack is the definition of IP spoofing.

“Spoofing involves falsifying data, such as IP or MAC addresses, to hide the source of malicious activity.” — Cisco CyberOps guide

The scenario describes an attack vector where insiders or malicious actors use removable media (USB drives) to introduce malware, which then connects to external sources to exfiltrate data and compromise systems.

Option B addresses the human factor and technological prevention. The guide stresses the need for training to ensure users are aware of social engineering and removable media risks. Blocking the use of USB drives at a system level further minimizes attack vectors.

Option E, using Multi-Factor Authentication (MFA), provides an additional layer of defense. Even if credentials are stolen, MFA can prevent the attacker from accessing sensitive internal resources without the second authentication factor.

These controls align with defense-in-depth strategies recommended in the Cisco CyberOps Associate curriculum to combat insider threats and external unauthorized access.