A SOC analyst is notified by the network monitoring tool that there are unusual types of internal traffic on IP subnet 103.921.2239.0/24. The analyst discovers unexplained encrypted data files on a…

The correct answer is D. malware outbreak. The question has an error in the IP address: The cause of the issue is more likely a malware outbreak. The unusual types of internal traffic and the presence of unexplained encrypted data files on a system are indicators of a possible malware infection. The specific IP subnet…

Security Monitoring

Question

A SOC analyst is notified by the network monitoring tool that there are unusual types of internal traffic on IP subnet 103.921.2239.0/24. The analyst discovers unexplained encrypted data files on a computer system that belongs on that specific subnet. What is the cause of the issue?

Options

ADDoS attack
Bphishing attack
Cvirus outbreak
Dmalware outbreak

How the community answered

(31 responses)

A
6% (2)
B
3% (1)
D
90% (28)

Explanation

The question has an error in the IP address: The cause of the issue is more likely a malware outbreak. The unusual types of internal traffic and the presence of unexplained encrypted data files on a system are indicators of a possible malware infection. The specific IP subnet may have been targeted by the attacker to spread the malware within the network. The SOC analyst should conduct further analysis to identify the malware type and determine the extent of the infection to mitigate the issue.

Topics

#malware outbreak#network anomaly#encrypted files#subnet monitoring

Community Discussion

No community discussion yet for this question.

Full 350-201 Practice