nerdexam
CompTIA

CAS-003 · Question #78

An administrator believes that the web servers are being flooded with excessive traffic from time to time. The administrator suspects that these traffic floods correspond to when a competitor makes…

The correct answer is A. Implement data analytics to try and correlate the occurrence times. There is a time aspect to the traffic flood and if you correlate the data analytics with the times that the incidents happened, you will be able to prove the theory.

Enterprise Security Operations

Question

An administrator believes that the web servers are being flooded with excessive traffic from time to time. The administrator suspects that these traffic floods correspond to when a competitor makes major announcements. Which of the following should the administrator do to prove this theory?

Options

  • AImplement data analytics to try and correlate the occurrence times.
  • BImplement a honey pot to capture traffic during the next attack.
  • CConfigure the servers for high availability to handle the additional bandwidth.
  • DLog all traffic coming from the competitor's public IP addresses.

How the community answered

(39 responses)
  • A
    74% (29)
  • B
    8% (3)
  • C
    13% (5)
  • D
    5% (2)

Explanation

There is a time aspect to the traffic flood and if you correlate the data analytics with the times that the incidents happened, you will be able to prove the theory.

Topics

#data analytics#traffic correlation#DDoS investigation#security event analysis

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice