Question 618 of 730 from exam SY0-601: CompTIA Security+

Prev Question Next Question

A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks.

The security analyst then reviews the following application log:

Which of the following can the security analyst conclude?

A replay attack is being conducted against the application. B.

An injection attack is being conducted against a user authentication system. C.

A service account password may have been changed, resulting in continuous failed logins within the application. D.

A credentialed vulnerability scanner attack is testing several CVEs against the application.

A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks.

The security analyst then reviews the following application log:

Which of the following can the security analyst conclude?

A replay attack is being conducted against the application.

An injection attack is being conducted against a user authentication system.

A service account password may have been changed, resulting in continuous failed logins within the application.

A credentialed vulnerability scanner attack is testing several CVEs against the application.

Prev Question Next Question