問題文
An event record names a rule identifier, a signature name, a severity, and the packet that triggered it, and it states that the packet was forwarded. Which technology produced this record?
選択肢
- An intrusion detection sensor, because it reports a signature match while leaving the traffic to continue.
- A flow exporter, because the packet counts are present.
- A proxy, because a record that contains the packet that triggered it must have been produced by a device that terminates the session and rebuilds it, and only a device that rebuilds the session has the complete packet available to attach to its own record.
- An antivirus engine, because a signature name is involved and only an engine on the host assigns names to what it matches.