Exam SY0-701 Topic 1 Question 91 Discussion
Actual exam question for CompTIA's SY0-701 exam
Question #: 91
Topic #: 1
Question #: 91
Topic #: 1
A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details:
Which of the following best describes the indicator that triggered the alert?
Which of the following best describes the indicator that triggered the alert?
Suggested Answer: B Vote an answer
The activity described in the table, where multiple connection attempts are made on port 445 (used for SMB services), suggests a brute-force attack. The attacker likely used automated methods to guess credentials, causing multiple failures. Such attempts are a hallmark of brute- force attacks targeting shared resources.
by Haley at Jul 31, 2025, 05:49 PM
Contact Us
If you have any question please leave me your email address, we will reply and send email to you in 12 hours.
Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday
Support: Contact now
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).