NETSEC-ANALYST · Question #138
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile detects and…
The correct answer is B. Anti-Spyware Profile applied to outbound security policies. Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Question
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile detects and prevents this threat from establishing a command-and-control connection?
Options
- AVulnerability Protection Profile applied to outbound Security policy rules.
- BAnti-Spyware Profile applied to outbound security policies.
- CAntivirus Profile applied to outbound Security policy rules
- DData Filtering Profile applied to outbound Security policy rules.
How the community answered
(49 responses)- A6% (3)
- B78% (38)
- C2% (1)
- D14% (7)
Explanation
Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Topics
Community Discussion
No community discussion yet for this question.