exam questions

Exam CS0-002 All Questions

View all questions & answers for the CS0-002 exam

Exam CS0-002 topic 1 question 165 discussion

Actual exam question from CompTIA's CS0-002
Question #: 165
Topic #: 1
[All CS0-002 Questions]

During routine monitoring, a security analyst identified the following enterprise network traffic:
Packet capture output:

Which of the following BEST describes what the security analyst observed?

  • A. 66.187.224.210 set up a DNS hijack with 192.168.12.21.
  • B. 192.168.12.21 made a TCP connection to 66.187.224.210.
  • C. 192.168.12.21 made a TCP connection to 209.132.177.50.
  • D. 209.132.177.50 set up a TCP reset attack to 192.168.12.21.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
CatoFong
2 years, 2 months ago
Selected Answer: C
syn - syn/ack - ack
upvoted 4 times
2Fish
2 years, 1 month ago
Agree.. finally another question with out all the crappy verbiage.
upvoted 4 times
...
...
NickDrops
2 years, 2 months ago
Selected Answer: C
The 192 address asked the 66 address for DNS info, which it then used to connect to the 209 address and open a website/http.
upvoted 2 times
...
TheStudiousPeepz
2 years, 6 months ago
Selected Answer: C
SYN means connection was made. Thus it's C
upvoted 1 times
NerdAlert
2 years ago
nah, SYN just means a connection was requested. Like dialing a phone number, but that doesn't mean anyone answers or that the number even rings/works
upvoted 1 times
...
...
AkhilAthkuri
2 years, 6 months ago
3 way Handshake happened
upvoted 3 times
...
Adrian831
2 years, 7 months ago
Selected Answer: C
Agree with C
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago