CompTIA Exam SY0-601 Topic 3 Question 24 Discussion

Actual exam question for CompTIA's SY0-601 exam

Question #: 24
Topic #: 3

A security analyst is investigating an incident to determine what an attacker was able to do on a compromised laptop. The analyst reviews the following SIEM log:

Which of the following describes the method that was used to compromise the laptop?

AAn attacker was able to move laterally from PC1 to PC2 using a pass-the-hash attack

BAn attacker was able to bypass application whitelisting by emailing a spreadsheet attachment with an embedded PowerShell in the file

CAn attacker was able to install malware to the CAasdf234 folder and use it to gam administrator nights and launch Outlook

DAn attacker was able to phish user credentials successfully from an Outlook user profile

Show Suggested Answer

Suggested Answer: A

by Chauncey at May 07, 2022, 10:47 AM

Limited Time Offer

25%

Off

Get Premium SY0-601 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!