ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam
Go to Exam

Exam CS0-003 topic 1 question 14 discussion

Actual exam question from CompTIA's CS0-003
Question #: 14
Topic #: 1
[All CS0-003 Questions]

An incident response analyst notices multiple emails traversing the network that target only the administrators of the company. The email contains a concealed URL that leads to an unknown website in another country. Which of the following best describes what is happening? (Choose two.)

  • A. Beaconing
  • B. Domain Name System hijacking
  • C. Social engineering attack
  • D. On-path attack
  • E. Obfuscated links
  • F. Address Resolution Protocol poisoning
Show Suggested Answer Hide Answer
Suggested Answer: CE 🗳️
by ms123451 at Sept. 3, 2023, 4:50 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
LiveLaughToasterBath
Highly Voted 11 months, 2 weeks ago
Selected Answer: CE
”…target only the administrators of the company.” “…contains a concealed URL…” Social Engineering and Obfuscated Links
upvoted 14 times
...
newenglandgirl1078
Most Recent 2 weeks, 2 days ago
Selected Answer: CE
The best two answers are C: Social Engineering Attack and E: Obfuscated Links
upvoted 1 times
...
404Guy
3 months ago
Selected Answer: CE
C. Social engineering because it only involves a selected role within the company and E. Obfuscated links because it contains a concealed URL that directs users to an unknown malicious website.
upvoted 2 times
...
cartman_sc
6 months, 3 weeks ago
Selected Answer: CE
Administradores da empresa = Engenharia social URL Oculta = Links ofuscados
upvoted 3 times
...
Alizade
11 months, 4 weeks ago
Selected Answer: CE
The two best answers are C—social engineering attack and E. Obfuscated links.
upvoted 3 times
...
Cukur
1 year, 1 month ago
Selected Answer: CE
It's targeted, no reason to beacon
upvoted 1 times
...
chrys
1 year, 1 month ago
It's not beaconing. Beaconing is when a bot (zombie) is seeking to communicate with its command and control server.
upvoted 1 times
...
Uncle_Lucifer
1 year, 1 month ago
moderator should pls delete my selection of BC. It was erroneous meant CE
upvoted 2 times
...
Uncle_Lucifer
1 year, 1 month ago
Selected Answer: BC
You cant assume beaconing. The question says concealed links -> obfuscated link. The obfuscated link may be performing beaconing, but that info was not disclosed in the question. CE - good AC - bad
upvoted 2 times
Uncle_Lucifer
1 year, 1 month ago
moderator should pls delete this selection of BC. It was erroneous meant CE
upvoted 1 times
...
Uncle_Lucifer
1 year, 1 month ago
Meant CE. Why did i select BC
upvoted 1 times
...
...
IrishBeast
1 year, 2 months ago
Selected Answer: CE
This is CE, it's targeting the admin and has an obfuscated link. There is no beaconing at all.
upvoted 3 times
...
IrishBeast
1 year, 2 months ago
This is CE, it's targeting the admin and has an obfuscated link. There is no beaconing at all.
upvoted 4 times
...
[Removed]
1 year, 2 months ago
This is not A and C. Beaconing is not happening at all in the question. Data is not leaving the network. C and E. Social engineering via emailing only admins Obfuscated links because the concealed URL
upvoted 2 times
...
ms123451
1 year, 2 months ago
Selected Answer: AC
A and C, this is very common to send email with links to see who clicks, it's part of reconnaissance, URL obfuscation is better suited to bypass security controls
upvoted 1 times
...
ms123451
1 year, 2 months ago
A and C, this is very common to send email with links to see who clicks, it's part of reconnaissance, URL obfuscation is better suited to bypass security controls
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago