Exit CCFH-202 CrowdStrike Certified Falcon Hunter
Question 5 of 5
0% complete
Q5 Single choice

The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:

  • A

    A zero-day vulnerability is being exploited on a Microsoft Exchange server

  • B

    A publicly available web application has been hacked and is causing the lockouts

  • C

    Users are locking their accounts out because they recently changed their passwords

  • D

    A password guessing attack is being executed against remote access mechanisms such as VPN