Câu 468: SY0-401: CompTIA Security+
An administrator is investigating a system that may potentially be compromised, and sees the following log entries on the router.*Jul 15 14:47:29.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 3 packets.*Jul 15 14:47:38.779:%Router1: list 101 permitted tcp 192.10.3.204…
Nội dung câu hỏi
An administrator is investigating a system that may potentially be compromised, and sees the following log entries on the router.*Jul 15 14:47:29.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 3 packets.*Jul 15 14:47:38.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 6 packets.*Jul 15 14:47:45.779:%Router1: list 101 permitted tcp 192.10.3.204(57222) (FastEthernet 0/3) -> 10.10.1.5 (6667), 8 packets. Which of the following BEST describes the compromised system?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. It is running a rogue web server
- B. It is being used in a man-in-the-middle attack
- C. It is participating in a botnet — đáp án hiện tại
- D. It is an ARP poisoning attack
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.