CompTIA
SY0-701 · Question #459
A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details: Which of the following best describes the…
The correct answer is B. Brute-force attack. The activity described in the table, where multiple connection attempts are made on port 445 (used for SMB services), suggests a brute-force attack. The attacker likely used automated methods to guess credentials, causing multiple failures. Such attempts are a hallmark of…
Submitted by priya_blr· Mar 6, 2026Threats, vulnerabilities, and mitigations
Question
A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details: Which of the following best describes the indicator that triggered the alert?
Exhibit
Options
- ABlocked content
- BBrute-force attack
- CConcurrent session usage
- DAccount lockout
How the community answered
(33 responses)- A3% (1)
- B79% (26)
- C12% (4)
- D6% (2)
Explanation
The activity described in the table, where multiple connection attempts are made on port 445 (used for SMB services), suggests a brute-force attack. The attacker likely used automated methods to guess credentials, causing multiple failures. Such attempts are a hallmark of brute- force attacks targeting shared resources.
Community Discussion
No community discussion yet for this question.