SAL2 Practice Questions - TryHackMe Security Analyst Level 2 (SAL2) Exam

Access More Questions

An analyst reviewing Splunk logs notices a user account performed 47 failed logins followed by one successful login, then immediately ran 'net localgroup administrators' and 'whoami /all'. Which attack stage does this sequence most likely represent?

Lateral movement via Pass-the-Hash Successful brute-force followed by post-exploitation discovery Credential stuffing with no compromise Kerberoasting followed by ticket decryption

Correct Answer:

Successful brute-force followed by post-exploitation discovery

Access more questions from this quiz

Continue to SAL2 Practice Questions - TryHackMe Security Analyst Level 2 (SAL2) Exam for more practice questions and the full quiz experience.

Access More Questions