EC-Council
212-89 · Question #77
212-89 Question #77: Real Exam Question with Answer & Explanation
Sign in or unlock 212-89 to reveal the answer and full explanation for question #77. The question stem and answer options stay visible for context.
Question
Johnson an incident handler is working on a recent web application attack faced by the organization. As part of this process, he performed data preprocessing in order to analyzing and detecting the watering hole attack. He preprocessed the outbound network traffic data collected from firewalls and proxy servers and started analyzing the user activities within a certain time period to create time-ordered domain sequences to perform further analysis on sequential patterns. Identify the data-preprocessing step performed by Johnson.
Options
- AFiltering invalid host names
- BIdentifying unpopular domains
- CHost name normalization
- DUser-specific sessionization
Unlock 212-89 to see the answer
You've previewed enough free 212-89 questions. Unlock 212-89 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.