A Cybersecurity Analyst Is Investigating a Potential Incident Affecting Multiple

question 102

Multiple Choice

A cybersecurity analyst is investigating a potential incident affecting multiple systems on a company's internal network. Although there is a negligible impact to performance, the following symptoms are present on each of the affected systems: Existence of a new and unexpected svchost.exe process Persistent, outbound TCP/IP connections to an unknown external host with routine keep-alives transferred DNS query logs showing successful name resolution for an Internet-resident dynamic DNS domain If this situation remains unresolved, which of the following will MOST likely occur?

• A) The affected hosts may participate in a coordinated DDoS attack upon command
• B) An adversary may leverage the affected hosts to reconfigure the company's router ACLs
• C) Key files on the affected hosts may become encrypted and require ransom payment for unlock
• D) The adversary may attempt to perform a man-in-the-middle attack

---

Definitions:

Robbers Cave Experiment

The Robbers Cave Experiment was a psychological study on intergroup conflict and cooperation, finding that competitive tasks increase hostility between groups while cooperative tasks reduce it.

Cognitive Bases

Fundamental mental processes and structures that underlie thinking, perception, memory, and decision-making in individuals.

Realistic Group Conflict Theory

A theory that explains how intergroup conflict can arise from competition between groups for limited resources.

Checkerboard Of Prejudice

A metaphorical description of how prejudiced attitudes and behaviors are distributed unevenly across a society, like a checkerboard, reflecting various degrees and types of prejudice.