PCNSA · Question #138
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile detects and…
The correct answer is B. Anti-Spyware Profile applied to outbound security policies. Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Question
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile detects and prevents this threat from establishing a command-and-control connection?
Options
- AVulnerability Protection Profile applied to outbound Security policy rules.
- BAnti-Spyware Profile applied to outbound security policies.
- CAntivirus Profile applied to outbound Security policy rules
- DData Filtering Profile applied to outbound Security policy rules.
How the community answered
(40 responses)- A10% (4)
- B83% (33)
- C5% (2)
- D3% (1)
Explanation
Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Topics
Community Discussion
No community discussion yet for this question.