A security analyst discovered requests associated with IP addresses known for born legitimate 3nd bot-related traffic. Which of the following should the analyst use to determine whether the requests…

The correct answer is A. User-agent string. User-agent string is the best option for determining whether requests are malicious. The user- agent string provides information about the client making the request, including the browser or bot in use. By analyzing the user-agent, the security analyst can differentiate between…

Submitted by jian89· Mar 6, 2026Security Operations

Question

A security analyst discovered requests associated with IP addresses known for born legitimate 3nd bot-related traffic. Which of the following should the analyst use to determine whether the requests are malicious?

Options

AUser-agent string
BByte length of the request
CWeb application headers
DHTML encoding field

How the community answered

(29 responses)

A
79% (23)
B
14% (4)
C
3% (1)
D
3% (1)

Explanation

User-agent string is the best option for determining whether requests are malicious. The user- agent string provides information about the client making the request, including the browser or bot in use. By analyzing the user-agent, the security analyst can differentiate between legitimate traffic (such as from a recognized browser) and bot-related traffic (which often uses generic or suspicious user-agent strings).

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice