Correct answer and LETTER (D)
This is the most suspicious behavior because programs like notepad.exe typically don't need internet access. It could indicate malware attempting to communicate with a remote server.
C. PowerShell launching a PowerShell script
This behavior can be suspicious because it indicates the use of PowerShell to execute scripts, which is commonly exploited by attackers to run malicious code on a system. It's often a sign of potential compromise or unauthorized activity.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
alanalanalan
6 months agosilva222222
6 months, 3 weeks agodylann
7 months, 1 week ago