CCCS-203B: CrowdStrike Certified Cloud Specialist

By CrowdStrike · Question Mode

QuestionQ41

VerifiedFindings and Detection Analysis

A process on one of your virtual machines is trying to run a script that connects to an unfamiliar external IP address. This behavior aligns with patterns of known malicious activity.

What action should you take to identify any related persistence mechanisms?

Explanation

Persistence is commonly established through mechanisms such as startup scripts and scheduled tasks, which can automatically rerun unauthorized code after a restart or at specified times. Reviewing them for unauthorized entries helps identify the mechanism maintaining the malicious activity.

Community Discussion

No comments yet. Be the first to start the discussion!