nerdexam
HP

HPE6-A84 · Question #29

Refer to the exhibit. Which IP address should you record as a possibly compromised client?

The correct answer is A. 10.1.26.151. The exhibit shows a screenshot of a Malwarebytes alert that indicates that a website was blocked due to compromise. The alert contains the following information: The type of protection: Web Protection The website that was blocked: 10.254.1.21 The port that was used: 80 The…

Troubleshooting Advanced Network Security

Question

Refer to the exhibit. Which IP address should you record as a possibly compromised client?

Exhibit

HPE6-A84 question #29 exhibit

Options

  • A10.1.26.151
  • B10.1J.100
  • C10.1.26.1
  • D10.254.1.21

How the community answered

(57 responses)
  • A
    81% (46)
  • B
    5% (3)
  • C
    11% (6)
  • D
    4% (2)

Explanation

The exhibit shows a screenshot of a Malwarebytes alert that indicates that a website was blocked due to compromise. The alert contains the following information: The type of protection: Web Protection The website that was blocked: 10.254.1.21 The port that was used: 80 The process that initiated the connection: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe The IP address of the device that initiated the connection: 10.1.26.151 The IP address of the device that initiated the connection is the one that should be recorded as a possibly compromised client, as it indicates that the device tried to access a malicious website that could infect it with malware or steal its data. In this case, the IP address of the possibly compromised client is

Topics

#traffic analysis#compromised client#security investigation#packet capture

Community Discussion

No community discussion yet for this question.

Full HPE6-A84 Practice