Analyze Indicators of Malware-Based Attacks - CompTIA Security+ Performance Based Question

Sign up for our Security+ Complete Self-Paced Course to study for and ace the exam on your own schedule:
cyberkrafttraining.com/securi...
For 10% off your enrollment use discount code: KZbinSP
The Cyberkraft Security+ Bootcamp will fully prepare you to ace the Security+ exam with 40 hours of live training with our CompTIA certified instructors:
cyberkrafttraining.com/securi...
Ace your exam and earn an average yearly salary of $85,000.
Save $200 off of your enrollment with discount code: KZbin
Our bootcamp includes:
• 40 hours of live instruction over five days of instruction
• Exam fee included ($381 value)
• Expert instruction in all five domains
• Access to the Official CompTIA Security+ Learn and Labs Environment with PBQs, Labs, a digital textbook, and more
• Over 1000 pages of PDF study guides
• 12 practice tests and 6 simulation exams (500+ total questions) to fully prepare you for test day
• High definition video lessons accessible online or through the Cyberkraft App (included)
• Weekly study sessions and live support
• Lifetime access to all future course updates
• Second Shot Guarantee - If you don’t pass the first attempt, we will pay for your second exam
Sign up for our free video training on how to register and take the exam online: cyberkrafttraining.com/securi...
Cyberkraft is a CompTIA Authorized Partner.
Questions? E-mail: [[e-mail]]

[@htwingnut]

Thank you. These are the kinds of questions that drive me nuts. I don't feel that I ever really learn anything. Just more questions.

[@andyinsdca]

I think that O365 being mentioned in the first question means that there's nothing blocking malicious email (O365=Exchange/Email/Outlook)

[@dostovovocigan2797]

I just got back from passing my Sec+ exam. Thanks for doing these! They really helped me with my PBQ’s and the thought process to answer them.

[@cyberkraft1]

Congratulations on passing your exam!

[@user-if1ht4cw2e]

Thank you for putting out good content

[@wetodd3879]

I really hate these types of questions. So easy to go a few other routes that seem to make sense in the scenario, but then sometimes their justifications include information that was never given to us in the first place. Let alone the fact that you will never be doing these things all on your own or without being able to research. It's just a bit over the top. But then again it's their game so you either learn to play or don't play at all.

[@scottsmith6861]

Some of these pbqs are so open ended.. It just seems pretty unreasonable to only have one right answer in some of these cases...

[@dondups1543]

Luv yr labs, yr explainations ar awesome, u xplain everything, gives me insute to real life situations😊 tx

[@pohi6428]

Why do u type like that

[@eswalls]

The explanation at 17:45 mentions a real-world case study; Professor Messer went into a lot of detail about the Target and Capital One attacks, so maybe check those out? Vincent Humble got a 4 or 5 on this. I think some of these are just luck.

[@josephgarceau6753]

For the first question, I think the reason that they mention Microsoft Office 365 having security misconfigurations is that they do not have a DLP(Data Loss Prevention) settings configured to block the malicious email or prevent data exfiltration.

[@migueldiego8819]

@cyberkaft you say to focus on the questions themselves yet for the delivery method you focused on the imagery. There, I was convinced the best choice for both would be Appliciation vulnerabilities since in both cases there's an issue with application patch vulnerabilities. Also in scenario 1, given that the malicious actor intends on exploit WFH I was convinced that the best payload option would be RAT or spyware. I was wrong obviously but hard to wrap my head around it. it still seems to me that you read much more into it than I did (I don't even get where you came up with the keylogger) when I was inferring less and pulling from the literal information given

[@ironsilk6634]

Thank was tricky! 🤔

[@seanknight9808]

Yes, it was! This question does not make sense!

[@Lmoro00]

good content , anyone passed sec+ and had these exact pbqs on test ???

[@LUKSTUFF]

I am concerned with the amount of time it might take to answer these multi-answer PBQs. Does the actual exam consider this 1 question and therefore I only have 1 minute to answer or it is more like 8 questions and I can take longer to go through the variables?

[@jfpasky]

I recommend just skipping the PBQs at the beginning of the test and do the multiple choice first. You get 90 minutes total for the whole test so you should wait until the end to do PBQs because they take longer. Each question does not have a set amount of time.

[@R-IloT4.0]

Moreover, you might get 3 or four of those

[@wetodd3879]

​@jfpasky I agree on doing the PBQs last. I took Net+ exam a few months ago and the PBQs really threw me for a loop (failed the exam btw). CompTia's own practice exam didn't come close to what was on the real exam. All new scenarios that were never touched on in their study material. Then again I only had access to their practice exam and the quiz modules (which is a terrible way of teaching). But yeah save them for last bc you'll spend way more time trying to parse everything out and when you're through the PBQs you have less than an hour to get through at least 85 more questions.

[@section9999]

🧂😄 Jk man loving the channel and your content keep doing what you do!

[@demiladeadeisrael799]

What a question 😂😂