Q: 15
Refer to the exhibit.
A network administrator is investigating suspicious network activity by analyzing captured traffic. An
engineer notices abnormal behavior and discovers that the default user agent is present in the
headers of requests and data being transmitted What is occurring?
A network administrator is investigating suspicious network activity by analyzing captured traffic. An
engineer notices abnormal behavior and discovers that the default user agent is present in the
headers of requests and data being transmitted What is occurring?Options
Discussion
Option C fits what I've seen in the official guide. Attack vector in CVSS gives a higher score if the exploit can be done remotely, making it more severe. If you want more examples, check labs or practice questions.
Call it D, had something like this in a mock and D seemed right there.
So tired of CVSS wording tricks, but C tbh
Why is D tempting here? Isn't the attacker's distance already covered under the "remote" criteria CVSS uses for attack vector?
CVSS makes the attack vector score higher when a vulnerability can be exploited remotely. So C fits with what I remember from similar exam questions, but if I'm off let me know.
C tbh. D trips up a lot of folks, but CVSS scores do spike for remote attacks, not just physical proximity.
Be respectful. No spam.
