CertNexus Exam CFR-410 Topic 4 Question 37 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 37
Topic #: 4

[All CFR-410 Questions]

Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

AUnusual network traffic

BUnknown open ports

CPoor network performance

DUnknown use of protocols

Show Suggested Answer

Suggested Answer: A, B

by Ona at Jun 21, 2024, 11:17 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

6 days ago

I believe Tcpdump can also help in identifying unknown open ports.

upvoted 0 times

...

9 days ago

Tcpdump is great for analyzing network traffic, so I'd say A) Unusual network traffic is the correct answer here.

upvoted 0 times

...

10 days ago

I agree with Wendell, it can also detect unknown use of protocols.

upvoted 0 times

...

13 days ago

I think Tcpdump can detect unusual network traffic.

upvoted 0 times

...