Exam SY0-601 topic 1 question 507 discussion

Actual exam question from CompTIA's SY0-601

Question #: 507
Topic #: 1

Security analysts notice a server login from a user who has been on vacation for two weeks. The analysts confirm that the user did not log in to the system while on vacation. After reviewing packet capture logs, the analysts notice the following:

Which of the following occurred?

A. A buffer overflow was exploited to gain unauthorized access.
B. The user’s account was compromised, and an attacker changed the login credentials.
C. An attacker used a pass-the-hash attack to gain access.
D. An insider threat with username smithJA logged in to the account.

Show Suggested Answer

Suggested Answer: C 🗳️

by phemendra at July 11, 2023, 9:47 p.m.

Comments

Submit Cancel

Malkhofash

1 year, 6 months ago

Pass-the-hash

upvoted 1 times

...

cyberPunk28

1 year, 6 months ago

Selected Answer: C

C. An attacker used a pass-the-hash attack to gain access

upvoted 2 times

...

ComPCertOn

1 year, 7 months ago

Selected Answer: C

the hash

upvoted 1 times

...

examcrammer

1 year, 8 months ago

Selected Answer: C

Hash value used for authentication

upvoted 1 times

...

JT4

1 year, 9 months ago

Selected Answer: C

A Pass-the-Hash (PtH) attack is a technique where an attacker captures a password hash (as opposed to the password characters) and then passes it through for authentication into a system.

upvoted 4 times

...

Gamsje

1 year, 11 months ago

Selected Answer: C

944d3697 is the hash C

upvoted 1 times

...

phemendra

1 year, 11 months ago

Selected Answer: C

Pass-the-hash

upvoted 1 times

...