Question 646 of 730 from exam SY0-601: CompTIA Security+

Question 646 of 730 from exam SY0-601: CompTIA Security+

Prev Question Next Question

Question

A security analyst is investigating an incident that was first reported as an issue connecting to network shares and the Internet.

While reviewing logs and tool output, the analyst sees the following:

IP

10.
10.
10.
10.
10.

Physical address
00-18-21-ad-24-be
01-31-a3-cd-23-ab
00-18-21-ad-24-be
00-19-08-ba-07-da
01-12-21-ca 7+

Which of the following attacks has occurred?

A.

IP conflict B.

Pass-the-hash C.

MAC flooding D.

Directory traversal E.

ARP poisoning.

E.

Explanations

A security analyst is investigating an incident that was first reported as an issue connecting to network shares and the Internet.

While reviewing logs and tool output, the analyst sees the following:

IP

10.
10.
10.
10.
10.

Physical address
00-18-21-ad-24-be
01-31-a3-cd-23-ab
00-18-21-ad-24-be
00-19-08-ba-07-da
01-12-21-ca 7+

Which of the following attacks has occurred?

A.

IP conflict

B.

Pass-the-hash

C.

MAC flooding

D.

Directory traversal

E.

ARP poisoning.

E.