{"id":3527,"date":"2023-12-03T18:53:34","date_gmt":"2023-12-03T18:53:34","guid":{"rendered":"https:\/\/exampracticetests.com\/c\/SY0-601\/comptia-security-sy0-601-question301\/"},"modified":"2023-12-04T09:14:21","modified_gmt":"2023-12-04T09:14:21","slug":"comptia-security-sy0-601-question301","status":"publish","type":"post","link":"https:\/\/exampracticetests.com\/c\/SY0-601\/comptia-security-sy0-601-question301\/","title":{"rendered":"CompTIA Security+ SY0-601 – Question301"},"content":{"rendered":"
A security analyst is investigating an incident to determine what an attacker was able to do on a compromised laptop. The analyst reviews the following SIEM log:
\n\"\"
\nWhich of the following describes the method that was used to compromise the laptop?

A.<\/strong> An attacker was able to move laterally from PC1 to PC2 using a pass-the-hash attack.
B.<\/strong> An attacker was able to bypass application whitelisting by emailing a spreadsheet attachment with an
\n embedded PowerShell in the file.
C.<\/strong> An attacker was able to install malware to the C:asdf234 folder and use it to gain administrator rights and
\n launch Outlook.
D.<\/strong> An attacker was able to phish user credentials successfully from an Outlook user profile<\/div>\n

<\/p>\n