nerdexam
Cisco

300-220 · Question #90

Detection tools are limited in their effectiveness due to: (Choose two)

The correct answer is A. The dynamic nature of cyber threats D. The evolving tactics of threat actors. Detection tools struggle to keep pace because cyber threats are constantly evolving (A) and threat actors continuously refine their attack methods, techniques, and procedures to evade detection (D) - both factors mean that signatures, rules, and behavioral baselines become…

Threat Hunting Fundamentals

Question

Detection tools are limited in their effectiveness due to: (Choose two)

Options

  • AThe dynamic nature of cyber threats
  • BThe physical security of the data center
  • CEncryption used by network protocols
  • DThe evolving tactics of threat actors

How the community answered

(48 responses)
  • A
    79% (38)
  • B
    8% (4)
  • C
    13% (6)

Explanation

Detection tools struggle to keep pace because cyber threats are constantly evolving (A) and threat actors continuously refine their attack methods, techniques, and procedures to evade detection (D) - both factors mean that signatures, rules, and behavioral baselines become outdated almost as fast as they're created.

Why B is wrong: Physical security of the data center is a separate control domain (access control, surveillance) and has no bearing on whether software-based detection tools can identify cyber threats effectively.

Why C is wrong: While encryption can complicate deep packet inspection, network protocols themselves don't inherently limit detection tools - many tools are designed to handle encrypted traffic via TLS inspection, metadata analysis, or endpoint-side visibility.

Memory tip: Think "moving targets" - both the threat landscape (A) and the attackers themselves (D) are always moving, making it impossible for static detection tools to stay current. If a choice describes something stable or physical, it's not the answer.

Topics

#detection limitations#threat dynamics#threat actor tactics#detection gaps

Community Discussion

No community discussion yet for this question.

Full 300-220 Practice