View all questions & answers for the CompTIA Security+ Practice Questions & Study Materials exam

CompTIA Security+ Practice Questions & Study Materials - Question #483 Discussion

Comment Image Comment Image Comment Image

A user's account is flagged for accessing internal servers from multiple countries within a 30-minute period. The user reports they were at the office during that time. Which of the following does this activity most likely indicate? (Choose one answer)

  • A. The user's credentials are being used in a scheduled automation tool.
  • B. The user's VPN connection is cycling through regional endpoints.
  • C. The user's credentials are actually shared credentials, and it is a false positive.
  • D. The user's credentials are compromised and are being used by an attacker.
Correct Answer: B

Brave-Dump Community Votes

Answer: D (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 2 months ago
Selected: D
Correct answer is D.
Why not B? Because VPN connections keep a specific connection point and can´t cycling in 30 minutes period