A Security Analyst Received an Alert from the SIEM Indicating

question 143

Multiple Choice

A security analyst received an alert from the SIEM indicating numerous login attempts from users outside their usual geographic zones, all of which were initiated through the web-based mail server. The logs indicate all domain accounts experienced two login attempts during the same time frame. Which of the following is the MOST likely cause of this issue?

• A) A password-spraying attack was performed against the organization.
• B) A DDoS attack was performed against the organization.
• C) This was normal shift work activity; the SIEM's AI is learning.
• D) A credentialed external vulnerability scan was performed.

---

Definitions:

Title Transfer

The legal process of transferring ownership of a property or asset from one party to another.

Transaction

An exchange or transfer of goods, services, or funds between parties.

Unsecured Creditor

A creditor who has extended credit without obtaining any collateral, making them more vulnerable in the event of debtor default.

Secured Creditor

A creditor that may look to particular assets of the debtor to ensure payment of the debt.