An attacker is able to capture the payload for the following packet: IP 192.168.1.22:2020 10.10.10.5:443 IP 192.168.1.10:1030 10.10.10.1:21 IP 192.168.1.57:5217 10.10.10.1:3389 During an investigation, an analyst discovers that the attacker was able to capture the information above and use it to log on to other servers across the company. Which of the following is the MOST likely reason?

Question

Quizplus · Accepted Answer

The attacker is likely capturing unencrypted credentials from the network traffic and using them to log into other servers. The presence of port 21 (FTP) and port 3389 (RDP) suggests that credentials might be transmitted in plaintext, making them vulnerable to interception.

An Attacker Is Able to Capture the Payload for the Following