Questão 4 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details: Which of the following best describes the indicator that triggered the alert?
- A. Blocked content
- B. Brute-force attack
- C. Concurrent session usage
- D. Account lockout
Resposta correta:
B
Explicação
Explanation: Correct answer: B. Brute-force attack Detailed The activity described in the table, where multiple connection attempts are made on port 445 (used for SMB services), suggests a brute-force attack. The attacker likely used automated methods to guess credentials, causing multiple failures. Such attempts are ahallmark of brute-force attacks targeting shared resources. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 4: Security Operations, Section: 'Indicators of Malicious Activity'.
Quer todas as 907 questões por R$ 1,00?