Study. uk . com
  1. Home
  2. All questions
  3. Question 445

CompTIA Security+ study material · question 445 of 611

How does an indicator of attack differ from an indicator of compromise?

  1. An indicator of attack is always a file hash
  2. An indicator of attack describes behaviour in progress, which allows intervention
  3. They are the same thing under different names
  4. An indicator of compromise is produced only by vendors
Show the answer

Answer: B. An indicator of attack describes behaviour in progress, which allows intervention

An indicator of compromise is evidence that something already happened; the other is a chance to act.

Challenge yourself on this topic → Study as cards