Refer to Exhibit. What type of attack would this process tree indicate?

The correct answer is C. Phishing Attack. This process tree indicates a phishing attack, as it shows a user opening an email attachment (outlook.exe) that launches a malicious macro (cmd.exe) that downloads and executes a payload (powershell.exe) that connects to a remote server (svchost.exe). A phishing attack is a…

Threat Detection and Investigation

Question

Exhibits

Options

ABrute Forcing Attack
BMan-in-the-middle Attack
CPhishing Attack
DWeb Application Attack

How the community answered

(22 responses)

A
9% (2)
B
5% (1)
C
82% (18)
D
5% (1)

Explanation

This process tree indicates a phishing attack, as it shows a user opening an email attachment (outlook.exe) that launches a malicious macro (cmd.exe) that downloads and executes a payload (powershell.exe) that connects to a remote server (svchost.exe). A phishing attack is a type of social engineering attack that uses deceptive emails or messages to trick users into opening malicious attachments or links that can compromise their systems or credentials.

Topics

#process tree analysis#phishing attack#attack classification#detection investigation

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice