QuestionQ46

Security Operations

A small but consistent series of network-breach attempts has occurred over an extended period. During an investigation, a SOC analyst discovers traffic leaving the network for known malicious hosts and originating from a rogue network device. Which of the following attack vectors is most likely being used to breach the network?

  • A Supply chain
  • B Buffer overflow
  • C Social engineering
  • D Ransomware
Explanation

A supply-chain attack can introduce a compromised or malicious network device into an environment, allowing persistent unauthorized communication with malicious external hosts. The rogue device and long-running, low-volume activity are consistent with this type of compromise.

Community Discussion

No comments yet. Be the first to start the discussion!