ExamTopics Logo
Mail Us[email protected]
Menu
Certnexus Discussions
exam questions

Exam CFR-310 All Questions

View all questions & answers for the CFR-310 exam
Go to Exam

Exam CFR-310 topic 1 question 55 discussion

Actual exam question from CertNexus's CFR-310
Question #: 55
Topic #: 1
[All CFR-310 Questions]

An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO’s account has been compromised. Which of the following anomalies MOST likely contributed to the incident responder’s suspicion?

  • A. Geolocation
  • B. False positive
  • C. Geovelocity
  • D. Advanced persistent threat (APT) activity
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by 044f354 at Sept. 29, 2024, 8:02 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
044f354
2 months, 4 weeks ago
Selected Answer: C
C. Geovelocity Explanation: Geovelocity refers to the speed at which a user would have to travel between two locations to log in from both within a given time frame. In this case, it would be impossible for the CEO to physically travel from New York City to Beijing in just one hour. This rapid change in location suggests that the account might be compromised and used by someone in Beijing.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago