CompTIA Security+ SY0-701 Practice Question

An IT security analyst at a financial institution has been tasked to inspect a suspected compromised workstation after several employees reported unusual activity. The analyst needs to verify if a keylogger software is installed on the system. Which of the following actions is MOST effective in determining the presence of keylogging software on the workstation?

  • Examine outbound network traffic for transmission of sensitive data to unauthorized destinations.

  • Ensure that the operating system and security software are up to date with the latest patches.

  • Check for unusual file permissions on critical system files and directories.

  • Review the list of running processes and installed programs on the system.

CompTIA Security+ SY0-701
Threats, Vulnerabilities, and Mitigations
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot