A Chief Information Security Officer wants to monitor the company's servers for SQLi attacks and allow for comprehensive investigations if an attack occurs. The company uses SSL decryption to allow…

The correct answer is D. Enabling full packet capture for traffic entering and exiting the servers. Full packet capture is a technique that records all network traffic passing through a device, such as a router or firewall. It allows for detailed analysis and investigation of network events, such as SQLi attacks, by providing the complete content and context of the packets…

Submitted by wei.xz· Mar 6, 2026Security Operations

Question

A Chief Information Security Officer wants to monitor the company's servers for SQLi attacks and allow for comprehensive investigations if an attack occurs. The company uses SSL decryption to allow traffic monitoring. Which of the following strategies would best accomplish this goal?

Options

ALogging all NetFlow traffic into a SIEM
BDeploying network traffic sensors on the same subnet as the servers
CLogging endpoint and OS-specific security logs
DEnabling full packet capture for traffic entering and exiting the servers

How the community answered

(29 responses)

A
21% (6)
B
7% (2)
C
10% (3)
D
62% (18)

Explanation

Full packet capture is a technique that records all network traffic passing through a device, such as a router or firewall. It allows for detailed analysis and investigation of network events, such as SQLi attacks, by providing the complete content and context of the packets. Full packet capture can help identify the source, destination, payload, and timing of an SQLi attack, as well as the impact on the server and database. Logging NetFlow traffic, network traffic sensors, and endpoint and OS-specific security logs can provide some information about network activity, but they do not capture the full content of the packets, which may limit the scope and depth of the

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice