GIAC
GISF · Question #144
You are concerned about rootkits on your network communicating with attackers outside yournetwork. Without using an IDS how can you detect this sort of activity?
The correct answer is A. By examining your firewall logs. See the full explanation below for the reasoning.
Question
You are concerned about rootkits on your network communicating with attackers outside yournetwork. Without using an IDS how can you detect this sort of activity?
Options
- ABy examining your firewall logs.
- BBy examining your domain controller server logs.
- CBy setting up a DMZ.
- DYou cannot, you need an IDS.
How the community answered
(21 responses)- A81% (17)
- B5% (1)
- C5% (1)
- D10% (2)
Community Discussion
No community discussion yet for this question.