nerdexam
CompTIA

CS0-003 · Question #140

During routine monitoring a security analyst identified the following enterprise network traffic: Packet capture output: Which of the following BEST describes what the security analyst observed?

Sign in or unlock CS0-003 to reveal the answer and full explanation for question #140. The question stem and answer options stay visible for context.

Submitted by ravi_2018· Mar 6, 2026Security Operations

Question

During routine monitoring a security analyst identified the following enterprise network traffic:

Packet capture output:

Which of the following BEST describes what the security analyst observed?

Exhibit

CS0-003 question #140 exhibit

Options

  • A66.187.224.210 set up a DNS hijack with 192.168.12.21.
  • B192.168.12.21 made a TCP connection to 66.187.224.210
  • C192.168.12.21 made a TCP connection to 209.132.177.50
  • D209.132.177.50 set up a TCP reset attack to 192.168.12.21

Unlock CS0-003 to see the answer

You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#packet analysis#TCP connection#network monitoring#network traffic
Full CS0-003 Practice