Free Preparation Discussions
MENU
CrowdStrike CCFH-202b Exam - Topic 7 Question 2 Discussion
Topic #: 7
The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:
A hunting hypothesis is a statement that describes a possible malicious activity that can be tested with data and analysis. A good hunting hypothesis should be specific, testable, and relevant to the problem or goal. In this case, the best hunting hypothesis from the following is that a password guessing attack is being executed against remote access mechanisms such as VPN, as it explains the possible cause and method of the user account lockouts in a specific and testable way. A zero-day vulnerability on a Microsoft Exchange server is too vague and does not explain how it relates to the lockouts. A hacked web application is also too vague and does not specify how it causes the lockouts. Users locking their accounts out because they recently changed their passwords is not a malicious activity and does not account for the increase in calls.
Stephanie
4 days agoJaclyn
9 days agoChristiane
14 days agoVeronika
20 days agoNan
25 days agoErnest
30 days agoAlpha
1 month agoDalene
1 month agoLonna
2 months agoDenise
2 months agoLavera
2 months agoTess
3 months agoElenore
3 months agoJosefa
3 months agoStephane
3 months ago