Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFH-202b Exam - Topic 3 Question 14 Discussion

Posted by Deja on Jul 16, 2026 at 01:54 PM

Refer to Exhibit.

What type of attack would this process tree indicate?

Suggested Answer: C

This process tree indicates a phishing attack, as it shows a user opening an email attachment (outlook.exe) that launches a malicious macro (cmd.exe) that downloads and executes a payload (powershell.exe) that connects to a remote server (svchost.exe). A phishing attack is a type of social engineering attack that uses deceptive emails or messages to trick users into opening malicious attachments or links that can compromise their systems or credentials.


Get Premium CCFH-202b Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
DE
Dewitt 1 month ago
I agree with Solange. The process tree shows web vulnerabilities.
LE
Leonor 1 month ago
I think it's a phishing attack. The signs are there.
SO
Solange 1 month ago
This looks like a web application attack to me.
LE
Leota 2 months ago
Wow, I didn’t expect that! Are we sure about the Web App angle?
LA
Latrice 2 months ago
Phishing seems unlikely based on this.
SA
Sanda 2 months ago
I’m not so sure, could it be a Man-in-the-middle Attack?
AU
Audry 2 months ago
Totally agree, the process tree shows signs of it!
NI
Nichelle 2 months ago
Looks like a Web Application Attack to me.
MA
Maynard 3 months ago
I feel like this is definitely related to phishing, but I can't pinpoint why. Maybe the process tree shows some suspicious activity that aligns with that?
DE
Deonna 3 months ago
I'm a bit confused. I remember that brute forcing is more about password cracking, but I can't recall how it relates to process trees.
ED
Edwin 3 months ago
I practiced a similar question last week, and it was about identifying attack types from process trees. I think a Web Application Attack could fit here too.
DE
Delmy 3 months ago
I think this might be a Man-in-the-middle Attack, but I'm not entirely sure. I remember something about how those attacks manipulate communication.
0/2000 characters

Save Cancel