PCNSA · Question #213
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile when applied to ou
The correct answer is D. Anti-Spyware Profile. Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Question
You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-and-control connection?
Options
- AAntivirus Profile
- BData Filtering Profile
- CVulnerability Protection Profile
- DAnti-Spyware Profile
How the community answered
(19 responses)- B5% (1)
- C5% (1)
- D89% (17)
Explanation
Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.
Topics
Community Discussion
No community discussion yet for this question.