CompTIA
SY0-501 · Question #188
A security analyst observes the following events in the logs of an employee workstation: Given the information provided, which of the following MOST likely occurred on the workstation?
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #188. The question stem and answer options stay visible for context.
Submitted by wei.xz· Mar 4, 2026Threats, vulnerabilities, and mitigations
Question
A security analyst observes the following events in the logs of an employee workstation:
Given the information provided, which of the following MOST likely occurred on the workstation?
Exhibit
Options
- AApplication whitelisting controls blocked an exploit payload from executing.
- BAntivirus software found and quarantined three malware files.
- CAutomatic updates were initiated but failed because they had not been approved.
- DThe SIEM log agent was not turned properly and reported a false positive.
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Application whitelisting#Exploit prevention#Endpoint security