Exam SY0-701 topic 1 question 270 discussion

Actual exam question from CompTIA's SY0-701

Question #: 270
Topic #: 1

A security investigation revealed that malicious software was installed on a server using a server administrator's credentials. During the investigation, the server administrator explained that Telnet was regularly used to log in. Which of the following most likely occurred?

A. A spraying attack was used to determine which credentials to use.
B. A packet capture tool was used to steal the password.
C. A remote-access Trojan was used to install the malware.
D. A dictionary attack was used to log in as the server administrator.

Show Suggested Answer

Suggested Answer: B 🗳️

by baronvon at Aug. 24, 2024, 5:08 p.m.

Comments

Submit Cancel

FrozenCarrot

11 months ago

Telnet no encryption

upvoted 3 times

...

pokii1992

11 months, 3 weeks ago

B. A packet capture tool was used to steal the password. This is the most likely scenario given that the administrator regularly used Telnet, which transmits data in plain text. An attacker could easily capture the login credentials using a packet sniffing tool, then use those stolen credentials to install the malicious software on the server.

upvoted 1 times

...

baronvon

11 months, 3 weeks ago

Selected Answer: B

B. A packet capture tool was used to steal the password. Telnet transmits data, including credentials, in plaintext, making it vulnerable to interception. A packet capture tool could easily capture the login credentials being transmitted, allowing an attacker to gain unauthorized access to the server.

upvoted 3 times

...