Câu 106: CAS-005: CompTIA SecurityX

During a security assessment using an EDR solution, a security engineer generates the following report about the assets in the system: After five days, the EDR console reports a blocked infection on the host 0WIN23 by a remote access Trojan. Which of the following most likely enabled the attempted infection?

1. A. 0WIN23 uses a legacy version of Windows that is not supported by the EDR.
2. B. LN002 was not supported by the EDR solution and propagates the RAT.
3. C. 0WIN29’s EDR has an unknown vulnerability that was exploited by the attacker. — đáp án hiện tại
4. D. MAC005 spreads the malware through other hosts in the network.