ExamTopics Logo
Mail Us[email protected]
Menu
Crowdstrike Discussions
exam questions

Exam CCFH-202 All Questions

View all questions & answers for the CCFH-202 exam
Go to Exam

Exam CCFH-202 topic 1 question 19 discussion

Actual exam question from CrowdStrike's CCFH-202
Question #: 19
Topic #: 1
[All CCFH-202 Questions]

The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:

  • A. A zero-day vulnerability is being exploited on a Microsoft Exchange server
  • B. A publicly available web application has been hacked and is causing the lockouts
  • C. Users are locking their accounts out because they recently changed their passwords
  • D. A password guessing attack is being executed against remote access mechanisms such as VPN
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by alanalanalan at July 9, 2024, 10:48 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
NastyNutsu
2 months ago
Selected Answer: D
A. does not explain the increase in account lockouts B. same as A C. unlikely that multiple people change their password at the same period D. this indicate that a brute force attack, which results in multiple account get lockouts (best answer).
upvoted 1 times
...
alanalanalan
8 months ago
Selected Answer: D
Selected Answer: D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago