CompTIA
CS0-003 · Question #508
An analyst receives alerts that state the following traffic was identified on the perimeter network firewall: Which of the following best describes the indicator of compromise that triggered the alert
The correct answer is D. Denial of service. Small packets sent to the same IP address over time is a typical indicator or DoS.
Submitted by anna_se· Mar 6, 2026Security Operations
Question
An analyst receives alerts that state the following traffic was identified on the perimeter network firewall:
Which of the following best describes the indicator of compromise that triggered the alerts?
Exhibit
Options
- AAnomalous activity
- BBandwidth saturation
- CCryptomining
- DDenial of service
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C16% (4)
- D72% (18)
Explanation
Small packets sent to the same IP address over time is a typical indicator or DoS.
Topics
#Denial of Service#firewall alerts#network traffic analysis#IoC
Community Discussion
No community discussion yet for this question.