Exam SK0-005 topic 1 question 232 discussion

Actual exam question from CompTIA's SK0-005

Question #: 232
Topic #: 1

A junior administrator reported that the website used for anti-malware updates is not working. The senior administrator then discovered all requests to the anti-malware site are being redirected to a malicious site. Which of the following tools should the senior administrator check FIRST to identify the potential cause of the issue?

A. Data loss prevention
B. File integrity monitor
C. Port scanner
D. Sniffer

Show Suggested Answer

Suggested Answer: D 🗳️

by RBL23168 at Dec. 8, 2023, 6:56 p.m.

Comments

Submit Cancel

surfuganda

8 months, 4 weeks ago

Selected Answer: D

D. Sniffer Explanation: A sniffer is used to capture and analyze network packets exchanged between the client and the server during the request to the anti-malware site. A. Data loss prevention Data loss prevention (DLP) tools are used to prevent unauthorized disclosure of sensitive information. B. File integrity monitor File integrity monitoring (FIM) tools are used to monitor changes to files and file systems for signs of tampering or unauthorized modifications. C. Port scanner A port scanner is a tool used to scan a range of IP addresses and ports to identify open ports and services on a network.

upvoted 2 times

...

RBL23168

12 months ago

Selected Answer: D

For me this is sniffer. You need to see where traffic is coming and going from.

upvoted 1 times

...