Cisco Exam 350-201 Topic 9 Question 102 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 102
Topic #: 9

Refer to the exhibit.

An engineer is investigating a case with suspicious usernames within the active directory. After the engineer investigates and cross-correlates events from other sources, it appears that the 2 users are privileged, and their creation date matches suspicious network traffic that was initiated from the internal network 2 days prior. Which type of compromise is occurring?

Acompromised insider

Bcompromised root access

Ccompromised database tables

Dcompromised network

Show Suggested Answer

Suggested Answer: D

by Freeman at Nov 15, 2024, 04:07 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Delmy

6 months ago

I'm gonna go with compromised root access. Who needs a database or network when you can just log in as an admin, right? *laughs* But seriously, this sounds like a classic case of privileged account abuse.

upvoted 0 times

Jame

5 months ago

D) compromised network

upvoted 0 times

...

Pauline

6 months ago

C) compromised database tables

upvoted 0 times

...

Paris

6 months ago

B) compromised root access

upvoted 0 times

...

Shayne

6 months ago

A) compromised insider

upvoted 0 times

...

Kattie

6 months ago

I dunno, this one's tricky. Could be a compromised insider, could be a network issue. Gonna need to do some more digging to figure this one out. *scratches head* Maybe the engineer should try turning it off and on again?

upvoted 0 times

...

Leatha

7 months ago

I'm not sure, but compromised network also seems like a possible answer.

upvoted 0 times

...

Shonda

7 months ago

I agree with Miss, the creation date matching suspicious network traffic points to an insider threat.

upvoted 0 times

...

Leonor

7 months ago

Definitely a compromised insider. The timing and the privileges of the users are a dead giveaway. Gotta stay vigilant against those inside jobs, you know?

upvoted 0 times

...

Jenifer

7 months ago

Hmm, I'd say it's a compromised insider here. The suspicious username creation and network traffic points to an internal threat, not a database or network compromise.

upvoted 0 times