nerdexam
GIAC

GCIA · Question #143

Which of the following statements best describes the string matching method of signature analysis?

The correct answer is D. In string matching, an incoming packet is compared, byte by byte, with a single signature, a string of code. See the full explanation below for the reasoning.

Question

Which of the following statements best describes the string matching method of signature analysis?

Options

  • AString matching searches specific strings that may indicate an attack.
  • BString matching examines multiple fields from different protocols, such as source address, destination port,
  • CIn string matching, each packet is wrapped in predefined layers of different protocols.
  • DIn string matching, an incoming packet is compared, byte by byte, with a single signature, a string of code.

How the community answered

(51 responses)
  • A
    6% (3)
  • B
    10% (5)
  • C
    2% (1)
  • D
    82% (42)

Community Discussion

No community discussion yet for this question.

Full GCIA Practice