SY0-701 Question 246

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The Behavioral Pattern: The prompt describes a specific sequence of events: a user installs software from an untrusted source (an online forum), and immediately afterward, the security team notices external network traffic initiating a connection back into the user's computer on an uncommon port. How a Backdoor Operates: A backdoor bypasses normal authentication mechanisms to grant an attacker unauthorized, persistent access to a system. When malicious software containing a backdoor is installed, it typically opens a specific port (a listening port) or establishes an outbound connection to a Command and Control (C2) server. This allows an external attacker to remotely connect to and control the compromised machine.

• Chose D1

  The software contained a backdoor ✅ A backdoor allows attackers to connect remotely to the compromised system. External traffic on an uncommon port after installing software is a classic indicator of a backdoor.

• Chose D3

  Backdoors are hidden access methods that allow unauthorized remote access.