Utilize Custom Scripts in RTR to Remediate a Threat CCFR Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   Which of the following is a recommended security practice when using custom scripts in RTR?

   • AStoring scripts in plain text on shared drives
   • BDisabling RTR session logging to save storage
   • CSharing scripts publicly to get community feedback
   • DReviewing scripts for malicious or unintended actions before execution
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An analyst is writing a custom RTR script that will be run on multiple hosts. The script must log its actions to a file on each host for later review. The analyst wants to ensure that the log file is created in a consistent location across all hosts. Which path should the analyst use?

   • AUse the script's current working directory.
   • BUse the host's system root directory (C:\Windows).
   • CUse a hardcoded path like C:\Logs\remediation.log.
   • DUse the $env:TEMP directory, which is defined on all Windows hosts.
   Reveal Solution Discussion Select an answer first