In order to determine if network traffic adheres to expected usage and complies with technical standards, an organization would use a device that provides which functionality?

The correct answer is C. Protocol anomaly detection. In addition to standards compliance, Protocol Anomaly Detection determines whether data within the protocol adheres to expected usage. Even if a communication stream complies with a protocol standard, the way in which the protocol is being used may be inconsistent with what is…

Perimeter Security and Intrusion Detection

Question

Options

AStateful packet filtering
BSignature matching
CProtocol anomaly detection
DCRC checking
EForward error correction

How the community answered

(27 responses)

A
7% (2)
C
85% (23)
D
4% (1)
E
4% (1)

Explanation

In addition to standards compliance, Protocol Anomaly Detection determines whether data within the protocol adheres to expected usage. Even if a communication stream complies with a protocol standard, the way in which the protocol is being used may be inconsistent with what is expected. Perimeter devices that perform protocol anomaly detection contain in-depth knowledge of protocol standards and expected usage and are able to detect traffic that does not comply with those guidelines.

Topics

#protocol anomaly detection#network monitoring#IDS/IPS#traffic analysis

Community Discussion

No community discussion yet for this question.

Full GCED Practice