Free CompTIA CySA+ CS0-003 Practice Question

An organization’s network has been breached, and the security team has identified unusual encrypted traffic traversing to an external IP address. Additionally, a custom tool was found installed on one of the servers, which was not authorized or recognized by the IT department. In the context of the Diamond Model of Intrusion Analysis, which component does the unauthorized custom tool best exemplify?

  • Adversary

  • Infrastructure

  • Capability

  • Victim

This question's topic:
CompTIA CySA+ CS0-003 / 
Incident Response and Management
Your Score:

Check or uncheck an objective to set which questions you will receive.