A Security Analyst Is Performing a Forensic Investigation Involving Compromised

question 17

Multiple Choice

A security analyst is performing a forensic investigation involving compromised account credentials. Using the Event Viewer, the analyst was able to detect the following message: "Special privileges assigned to new logon." Several of these messages did not have a valid logon associated with the user before these privileges were assigned. Which of the following attacks is MOST likely being detected?

• A) Pass-the-hash
• B) Buffer overflow
• C) Cross-site scripting
• D) Session replay

---

Definitions:

Diagram

A visual representation that outlines, explains, or clarifies a concept or process, often using symbols, lines, and texts to convey relationships and components.

Efficient

Achieving maximum productivity with minimum wasted effort or expense.

Adaptable

Capable of being adjusted to new conditions or environments.