Given a scenario, analyze indicators of malicious activity.
6 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
6 total · page 1 of 1MITRE ATT&CK Technique for Redirecting Database Traffic
This SY0-701 question asks which MITRE ATT&CK technique best explains outbound database traffic redirection after a compromised server fails authentic
Identifying Tools by /etc/shadow Permission Denied Errors
This question tests the ability to identify security tools based on specific error messages during an audit. The correct answer is D because password
Keylogger Found in User File: First SOC Action?
This SY0-701 scenario shows a keylogger capture containing a Gmail address and a cleartext password; the first action should be to reimage the infecte
Identifying Memory Injection via Abnormal Outbound Traffic
This question tests the ability to identify memory injection as a vulnerability based on indicators of malicious activity such as unexpected outbound
Which Attack Intercepts and Reuses Login Credentials?
An on-path attack (formerly man-in-the-middle) places the malicious actor between the user and the financial database so credentials can be captured i
What should an analyst do first after discovering a SQL injection in query.php?
When an analyst finds a SQL injection attempt in query.php logs, the correct first step in SY0-701 incident response is to check the users table for n