フリー問題

Conducting Threat Hunting and Defending Using Cisco Technologies for Cybersecurity のフリー問題 9 / 20 問目

問題文

Two observations are handed to a hunter. One is a distinctive value in the field that names the sending program in a message header. The other is a value written under a settings key that one family of programs is known to create. Which side of the hierarchy does each sit on?

選択肢

  1. Both are traces on the wire, since a value that a product can match upon is held to arise in the traffic wherever it happens to be read.
  2. The first is a trace on the wire and the second is a trace on the machine, since the one arises in the traffic and the other arises in the store that the machine keeps.
  3. Both are traces on the machine, since a value that appears in a header has to be written by a program that runs upon the machine.
  4. The first is a trace on the machine and the second is a trace on the wire, since the header was written by the machine and the settings key was read across the network by the products.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。