フリー問題

Conducting Threat Hunting and Defending Using Cisco Technologies for Cybersecurity のフリー問題 20 / 20 問目

問題文

The memory side of one host shows a connection to an outside address, and the network records for that period hold nothing for that host. Which reading is the sound one?

選択肢

  1. That the clocks are out of step, so the next step is to shift one of the two sources until the observations happen to line up.
  2. That the two sources cover different ground, so the next step is to establish where the network side was watching from.
  3. That the memory side is mistaken, so the next step is to discard the finding and close that line of inquiry there.
  4. That the connection was blocked, so the next step is to look for the rule that denied it and confirm that the block held.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。