Which of the following tools will allow a technician to detect security-related TCP connection anomalies?

The correct answer is B. Performance monitor. Performance Monitor (such as Windows Performance Monitor or similar OS-level tools) tracks real-time system metrics including network statistics - such as TCP connections established, reset, or failed - enabling a technician to identify unusual connection patterns that may…

Security operations

Question

Options

ALogical token
BPerformance monitor
CPublic key infrastructure
DTrusted platform module

How the community answered

(55 responses)

A
2% (1)
B
95% (52)
C
4% (2)

Explanation

Performance Monitor (such as Windows Performance Monitor or similar OS-level tools) tracks real-time system metrics including network statistics - such as TCP connections established, reset, or failed - enabling a technician to identify unusual connection patterns that may indicate security issues like port scans, DoS attempts, or unauthorized connections. The other options are unrelated: a logical token is an authentication credential, Public Key Infrastructure (PKI) manages digital certificates and encryption keys, and a Trusted Platform Module (TPM) is a hardware chip for secure key storage and integrity verification - none of these monitor live TCP connection behavior.

Topics

#TCP anomaly detection#performance monitoring#network monitoring#security tools

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice