A Security Analyst Receives a SIEM Alert That Someone Logged

question 77

Multiple Choice

A security analyst receives a SIEM alert that someone logged in to the appadmin test account, which is only used for the early detection of attacks. The security analyst then reviews the following application log: Which of the following can the security analyst conclude?

• A) A replay attack is being conducted against the application.
• B) An injection attack is being conducted against a user authentication system.
• C) A service account password may have been changed, resulting in continuous failed logins within the application.
• D) A credentialed vulnerability scanner attack is testing several CVEs against the application.

---

Definitions:

Income Ratios

Financial metrics that compare various aspects of a company’s income to its sales, assets, or equity, to assess financial performance.

Capital Account

An account on a nation's balance of payments that records transactions involving the purchase and sale of assets, or in business accounting, an account representing owner's equity.

Partnership Capital

The total amount of equity contributed by all partners in a partnership business.

Personal Assets

Assets owned by an individual, including tangible and intangible items of value such as real estate, investments, and personal property.