Courseiva
mediumMultiple ChoiceObjective-mapped

FC0-U71 Practice Question: That their computer is running slowly and the…

Exhibit

Refer to the exhibit.

C:\Users\Admin> netstat -an | find "ESTABLISHED"
  TCP    192.168.1.10:49152    203.0.113.5:443       ESTABLISHED
  TCP    192.168.1.10:49153    203.0.113.5:443       ESTABLISHED
  TCP    192.168.1.10:49154    203.0.113.5:443       ESTABLISHED
  TCP    192.168.1.10:49155    203.0.113.5:443       ESTABLISHED

A user reports that their computer is running slowly and the network activity light is constantly on. The technician runs the command shown in the exhibit. Based on the output, what is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The computer is infected with malware communicating with a command-and-control server

The exhibit shows multiple established connections from the local computer to the same remote IP on port 443 (HTTPS). This pattern suggests a botnet or malware establishing multiple command-and-control channels. Option B is correct because it indicates a malware infection. Option A is wrong because a DoS attack would typically show many connections from different sources. Option C is wrong because excessive web browsing would show connections to various IPs, not just one. Option D is wrong because a firewall misconfiguration would block or allow traffic, not create multiple connections.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The computer is experiencing a denial-of-service (DoS) attack

    Why it's wrong here

    because a DoS attack would typically show many connections from different sources.

  • The computer is infected with malware communicating with a command-and-control server

    Why this is correct

    because it indicates a malware infection.

  • The user is running excessive web browsing sessions

    Why it's wrong here

    because excessive web browsing would show connections to various IPs, not just one.

  • The firewall is misconfigured and blocking legitimate traffic

    Why it's wrong here

    because a firewall misconfiguration would block or allow traffic, not create multiple connections.

About these practice questions

Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.