CompTIA SecurityX (CAS-005) CAS-005 — Question 181

A security analyst received a notification from a cloud service provider regarding an attack detected on a web server. The cloud service provider shared the following information about the attack: • The attack came from inside the network. • The attacking source IP was from the internal vulnerability scanners • The scanner is not configured to target the cloud servers. Which of the following actions should the security analyst take first?