112-51 · Question #10
Joseph, a security professional, was instructed to secure the organization's network. In this process, he began analyzing packet headers to check whether any indications of source and destination IP…
The correct answer is D. Atomic-signature-based analysis. Atomic-signature-based analysis is a type of attack signature analysis technique that uses a single characteristic or attribute of a packet header to identify malicious traffic. Atomic signatures are simple and fast to match, but they can also generate false positives or miss…
Question
Joseph, a security professional, was instructed to secure the organization's network. In this process, he began analyzing packet headers to check whether any indications of source and destination IP addresses and port numbers are being changed during transmission. Identify the attack signature analysis technique performed by Joseph in the above scenario.
Options
- AComposite-signature-based analysis
- BContext-based signature analysis
- CContent-based signature analysis
- DAtomic-signature-based analysis
How the community answered
(27 responses)- A7% (2)
- B15% (4)
- C4% (1)
- D74% (20)
Explanation
Atomic-signature-based analysis is a type of attack signature analysis technique that uses a single characteristic or attribute of a packet header to identify malicious traffic. Atomic signatures are simple and fast to match, but they can also generate false positives or miss some attacks. Some examples of atomic signatures are source and destination IP addresses, port numbers, protocol types, and TCP flags. Atomic-signature-based analysis is the technique performed by Joseph in the above scenario, as he analyzed packet headers to check whether any indications of source and destination IP addresses and port numbers are being changed during transmission.
Topics
Community Discussion
No community discussion yet for this question.