CERTIFIED-IN-CYBERSECURITY Question #245: Real Exam Question with Answer & Explanation

Question

What is the main difference between 'ingress' monitoring and 'egress' monitoring?

Options

• AIngress monitoring focuses on inbound traffic, while egress monitoring focuses on outbound traffic
• BIngress monitoring focuses on information sent between internal teams, while egress monitoring
• CIngress monitoring focuses on external threats, while ingress monitoring focuses on internal
• DIngress monitoring focuses on people employees starting at the organization, while egress

Explanation

Ingress monitoring focuses on incoming traffic, while egress monitoring focuses on outgoing traffic. In the context of network security, ingress monitoring is the analysis and management of traffic entering a network from the outside. Conversely, egress monitoring is the analysis and management of traffic leaving the network for the Internet or other networks. For example, an organization might use ingress monitoring to detect and block malicious traffic, such as attempts to exploit vulnerabilities or launch a denial-of-service attack. On the other hand, egress monitoring could be used to detect and prevent data exfiltration attempts, where an attacker or malicious insider attempts to send sensitive data out of the network. The remaining options are wrong for different reasons. Both ingress and egress monitoring can be used to detect external and internal threats. Second, the terms ingress and egress monitoring do not refer to monitoring employees entering or leaving an organization. Finally, ingress and egress monitoring refer to the direction of network traffic, not the type of teams involved.

No community discussion yet for this question.