212-82 · Question #60
Finley, a security professional at an organization, was tasked with monitoring the organizational network behavior through the SIEM dashboard. While monitoring, Finley noticed suspicious activities…
The correct answer is D. Content-based signature analysis. Content-based signature analysis is the attack signature analysis technique employed by Finley in this scenario. Content-based signature analysis is a technique that captures and analyzes a single network packet to determine whether the signature included malicious patterns…
Question
Finley, a security professional at an organization, was tasked with monitoring the organizational network behavior through the SIEM dashboard. While monitoring, Finley noticed suspicious activities in the network; thus, he captured and analyzed a single network packet to determine whether the signature included malicious patterns. Identify the attack signature analysis technique employed by Finley in this scenario.
Options
- AContext-based signature analysis
- BAtomic-signature-based analysis
- CComposite signature-based analysis
- DContent-based signature analysis
How the community answered
(27 responses)- B7% (2)
- C4% (1)
- D89% (24)
Explanation
Content-based signature analysis is the attack signature analysis technique employed by Finley in this scenario. Content-based signature analysis is a technique that captures and analyzes a single network packet to determine whether the signature included malicious patterns. Content- based signature analysis can be used to detect known attacks, such as buffer overflows, SQL injections, or cross-site scripting.
Topics
Community Discussion
No community discussion yet for this question.