Verified Q&A Bank

Free Practice Question #16459

In a remote workforce involving the container platform and financial reports, EDR alerts on a tool reading LSASS memory shortly after admin login. Which activity should be suspected?

+1-0
MCQ
A
Clean desk audit
B
Data classification
C
Credential dumping
D
RAID rebuild
CompTIA-SecurityPlusSY0-701practice-test-06domain-2-threats-vulnerabilities-mitigations2.4-malicious-activitycredential-dumpingdifficulty-3

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series