CFR-410 practice question 1 of 25
A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to the ~COMPANYWIDE mailing list and, shortly…
Choose your answer, then check it against the explanation.
A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to
the
~COMPANYWIDE mailing list and, shortly thereafter, users across the company receive the following
message:
“You seem tense. Take a deep breath and relax!”
The incident response team is activated and opens the picture in a virtual machine to test it. After a
short analysis, the following code is found in C:
\Temp\chill.exe:Powershell.exe –Command “do {(for /L %i in (2,1,254) do shutdown /r /m Error!
Hyperlink reference not valid.> /f /t / 0 (/c “You seem tense. Take a deep breath and relax!”);Start-
Sleep –s 900) } while(1)”
Which of the following BEST represents what the attacker was trying to accomplish?
Question 1 of 25
Keep practicing
Take the free CFR-410 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CFR-410 practice questions
- Question 2Which of the following should normally be blocked through a firewall?
- Question 3Tcpdump is a tool that can be used to detect which of the following indicators of comprom…
- Question 4What are the two most appropriate binary analysis techniques to use in digital forensics …
- Question 5A user receives an email about an unfamiliar bank transaction, which includes a link. Whe…
- Question 6When performing a vulnerability assessment from outside the perimeter, which of the follo…
- Question 7Which of the following can increase an attack surface?
