200-201 · Question #128
Why is encryption challenging to security monitoring?
The correct answer is B. Encryption is used by threat actors as a method of evasion and obfuscation. Encryption poses a challenge to security monitoring because threat actors often leverage encryption as a technique to evade detection and obscure their malicious activities. By encrypting their communications or payloads, attackers can hide their intentions, making it difficult…
Question
Why is encryption challenging to security monitoring?
Options
- AEncryption analysis is used by attackers to monitor VPN tunnels.
- BEncryption is used by threat actors as a method of evasion and obfuscation.
- CEncryption introduces additional processing requirements by the CPU.
- DEncryption introduces larger packet sizes to analyze and store.
How the community answered
(19 responses)- A5% (1)
- B89% (17)
- D5% (1)
Explanation
Encryption poses a challenge to security monitoring because threat actors often leverage encryption as a technique to evade detection and obscure their malicious activities. By encrypting their communications or payloads, attackers can hide their intentions, making it difficult for security monitoring systems, including IDS/IPS and other security tools, to inspect or analyze the encrypted content.
Topics
Community Discussion
No community discussion yet for this question.