CS0-003 · Question #360
A SOC analyst is analyzing traffic on a network and notices an unauthorized scan. Which of the following types of activities is being observed?
The correct answer is A. Potential precursor to an attack. Potential precursor to an attack: Unauthorized network scans are often used by attackers to gather information about the network, such as identifying open ports, services, and vulnerabilities. This information can then be used to plan and execute an attack. The detection of an…
Question
A SOC analyst is analyzing traffic on a network and notices an unauthorized scan. Which of the following types of activities is being observed?
Options
- APotential precursor to an attack
- BUnauthorized peer-to-peer communication
- CRogue device on the network
- DSystem updates.
How the community answered
(28 responses)- A93% (26)
- C4% (1)
- D4% (1)
Explanation
Potential precursor to an attack: Unauthorized network scans are often used by attackers to gather information about the network, such as identifying open ports, services, and vulnerabilities. This information can then be used to plan and execute an attack. The detection of an unauthorized scan is indicative of A. Potential precursor to an attack, as such scans are typically part of the reconnaissance phase in the cyber kill chain, used by attackers to identify potential targets and vulnerabilities within the network.
Topics
Community Discussion
No community discussion yet for this question.