CompTIA Exam CS0-002 Topic 1 Question 4 Discussion

Actual exam question for CompTIA's CS0-002 exam

Question #: 4
Topic #: 1

A security analyst is reviewing packet captures from a system that was compromised. The system was already isolated from the network, but it did have network access for a few hours after being compromised. When viewing the capture in a packet analyzer, the analyst sees the following:

Which of the following can the analyst conclude?

AMalware is attempting to beacon to 128.50.100.3.

BThe system is running a DoS attack against ajgidwle.com.

CThe system is scanning ajgidwle.com for PII.

DData is being exfiltrated over DNS.

Show Suggested Answer

Suggested Answer: D

by Carlee at May 08, 2022, 03:33 PM

Limited Time Offer

25%

Off

Get Premium CS0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!