nerdexam
CompTIA

CAS-002 · Question #512

Mark works as a Network Security Administrator for uCertify Inc. Mark has been assigned to a task to test the network security of the company. He created a webpage to discuss the progress of the…

The correct answer is B. The attack was social engineering and the firewall did not detect it. According to the scenario, the attack was social engineering and the firewall did not detect it.

Enterprise Security

Question

Mark works as a Network Security Administrator for uCertify Inc. Mark has been assigned to a task to test the network security of the company. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a company's icon to mark the progress of the test. Mark successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access. How was security compromised and how did the firewall respond?

Options

  • ASecurity was not compromised as the webpage was hosted internally.
  • BThe attack was social engineering and the firewall did not detect it.
  • CThe attack was Cross Site Scripting and the firewall blocked it.
  • DSecurity was compromised as keylogger is invisible for firewall.

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    73% (11)
  • C
    13% (2)
  • D
    7% (1)

Explanation

According to the scenario, the attack was social engineering and the firewall did not detect it.

Topics

#social engineering#keylogger#firewall limitations#web-based attack

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice