CompTIA Security+ (SY0-501) — Question 637
A security analyst is performing a manual audit of captured data from a packet analyzer. The analyst looks for Base64 encoded strings and applies the filter http.authbasic. Which of the following BEST describes what the analyst is looking for?
Answer options
- A. Unauthorized software
- B. Unencrypted credentials
- C. SSL certificate issues
- D. Authentication tokens
Correct answer: B
Explanation
The correct answer is B, as Base64 encoding is commonly used to encode unencrypted credentials in HTTP Basic Authentication. The other options do not relate directly to the presence of Base64 encoded data or HTTP authentication methods.