MENU
Refer to the exhibit.
An employee notices unexpected changes and setting modifications on their workstation and creates an incident ticket. A support specialist checks processes and services but does not identify anything suspicious. The ticket was escalated to an analyst who reviewed this event log and also discovered that the workstation had multiple large data dumps on network shares. What should be determined from this information?
Suggested Answer: B
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
45 comments · newest first
JI
Jill
11 months ago
Wait, multiple large data dumps? That’s a red flag!
TH
Theron
11 months ago
Definitely data obfuscation happening here.
LE
Leonora
11 months ago
Not so sure, could it be log tampering instead?
LO
Louisa
11 months ago
I agree, those data dumps are suspicious!
NO
Norah
12 months ago
Sounds like a reconnaissance attack to me.
GA
Gail
12 months ago
I feel like brute-force attacks usually target passwords, so I’m leaning towards data obfuscation or maybe even log tampering here.
AS
Ashlee
1 year ago
I practiced a question similar to this, and I think log tampering could be a possibility since the analyst found nothing suspicious initially.
ON
Onita
1 year ago
I’m not entirely sure, but I think a reconnaissance attack involves gathering information. The unexpected changes could hint at that, right?
FI
Filiberto
1 year ago
I remember studying data exfiltration techniques, and those large data dumps seem suspicious. Could it be related to data obfuscation?
IL
Ilene
1 year ago
I'm a bit confused on this one. The information provided doesn't seem to clearly point to any of the options. I'll need to review the details more carefully and try to eliminate the less likely scenarios.
TA
Tamar
1 year ago
Okay, let's see. Unexpected changes, data dumps, and no suspicious processes - this could be a case of log tampering. I'll make sure to consider that option.
CL
Clay
1 year ago
Hmm, the data dumps on the network shares are concerning. I'm leaning towards a reconnaissance attack, but I want to double-check my understanding.
AM
Amina
1 year ago
This seems like a tricky one. I'll need to carefully review the details and think through the possible scenarios.
ED
Edgar
1 year ago
I've got a good feeling about this one. The combination of the changes, data dumps, and the escalation to an analyst points to a reconnaissance attack. I'll go with that.
VA
Vallie
1 year ago
I'm a bit unsure about this one. Is it asking about the format of the metadata repository files specifically, or just the metadata in general? I'll have to think this through carefully.
DO
Doyle
2 years ago
Gotta love a good ol' reconnaissance attack. Keeps the cybersecurity folks on their toes, am I right?
BL
Blondell
2 years ago
D) log tampering
GE
German
2 years ago
C) brute-force attack
ST
Stephanie
2 years ago
B) reconnaissance attack
VE
Veronika
2 years ago
A) data obfuscation
DI
Dick
2 years ago
I still think it's more likely a reconnaissance attack, gathering information for a future attack.
JO
Joanne
2 years ago
That's a good point, Sol. It could be a way to hide their activities.
SO
Sol
2 years ago
But could it also be data obfuscation to cover their tracks?
SI
Sina
2 years ago
Brute-force attack? Nah, this sounds more like someone snooping around, trying to find vulnerabilities. Option B all the way.
JO
Johnathon
2 years ago
I'm going with option B. That data dump on the network shares is a classic recon move.
JO
Johanna
2 years ago
Absolutely, staying informed and proactive is key in protecting sensitive data.
JO
Johnetta
2 years ago
It's important to be vigilant against these kinds of security breaches.
AD
Adela
2 years ago
Yeah, those large data dumps definitely point to a reconnaissance attack.
BR
Brinda
2 years ago
I agree, option B seems like the most likely scenario.
DI
Dick
2 years ago
I agree with Joanne, the large data dumps on network shares suggest reconnaissance.
JO
Joanne
2 years ago
I think it might be a reconnaissance attack.
MA
Marquetta
2 years ago
Hmm, log tampering seems like a good possibility. Maybe the attacker was trying to cover their tracks.
MI
Michell
2 years ago
D) log tampering
PE
Peggie
2 years ago
C) brute-force attack
YO
Yolande
2 years ago
B) reconnaissance attack
CA
Catrice
2 years ago
A) data obfuscation
TA
Tamie
2 years ago
D) log tampering
BI
Billy
2 years ago
C) brute-force attack
TI
Titus
2 years ago
B) reconnaissance attack
FL
Fletcher
2 years ago
A) data obfuscation
JE
Jenelle
2 years ago
Definitely looks like a reconnaissance attack to me. All those data dumps and config changes? Sketchy stuff.
YE
Yesenia
2 years ago
D) log tampering
KI
Kimi
2 years ago
C) brute-force attack
JU
Junita
2 years ago
B) reconnaissance attack
LA
Lauran
2 years ago
A) data obfuscation