nerdexam
CompTIA

SY0-501 · Question #522

A security administrator is reviewing the following PowerShell script referenced in the Task Scheduler on a database server: $members = GetADGroupMemeber -Identity "Domain Admins" -Recursive | Select

Sign in or unlock SY0-501 to reveal the answer and full explanation for question #522. The question stem and answer options stay visible for context.

Submitted by emma.c· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A security administrator is reviewing the following PowerShell script referenced in the Task Scheduler on a database server:

$members = GetADGroupMemeber -Identity "Domain Admins" -Recursive | Select - ExpandProperty name if ($members -notcontains "JohnDoe"){ Remove-Item -path C:\Database -recurse -force } Which of the following did the security administrator discover?

Options

  • ARansomeware
  • BBackdoor
  • CLogic bomb
  • DTrojan

Unlock SY0-501 to see the answer

You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#logic bomb#malware analysis#PowerShell#scheduled tasks
Full SY0-501 Practice