NETSEC-ANALYST · Question #213
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile when applied to…
The correct answer is D. Anti-Spyware Profile. Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Question
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-and-control connection?
Options
- AAntivirus Profile
- BData Filtering Profile
- CVulnerability Protection Profile
- DAnti-Spyware Profile
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C8% (2)
- D84% (21)
Explanation
Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Topics
Community Discussion
No community discussion yet for this question.