From the course: CompTIA Security+ (SY0-701) Cert Prep

Unlock the full course today

Join today to access over 24,000 courses taught by industry experts.

Attack indicators

Attack indicators

From the course: CompTIA Security+ (SY0-701) Cert Prep

Start my 1-month free trial Buy for my team

Attack indicators

“

- [Instructor] Security professionals must understand the signs or indicators of common attacks. You need this knowledge so you can better defend your systems and networks and detect attacks when they occur. These indicators can be subtle, but if you recognize them quickly, you have the opportunity to intervene in an attack before too much damage is done. Account lockout is the first of these indicators. If users call the help desk reporting that their accounts have been locked but they don't remember typing in the wrong password, that's a sign that an attacker might be waging a brute force attempt to gain access to their account. This should prompt immediate action, including user notification and password reset. Concurrent session usage can also be an alarm. If an account is logged in from multiple devices simultaneously, especially from different geographic locations, that could indicate that credentials have been compromised. Related to this are impossible travel time scenarios…

Contents