Question 10:
An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?
Answer options:
A. sequence numbers B. IP identifier C. 5-tuple D. timestamps
Answer correct:
C