MENU
An engineer must configure network systems to detect command-and-control communications by decrypting ingress and egress perimeter traffic and allowing network security devices to detect malicious outbound communications. Which technology must be used to accomplish this task?
Suggested Answer: C
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Digital certificates are essential for decrypting ingress and egress perimeter traffic, as they provide the necessary encryption keys for secure communications. By using digital certificates, network security devices can inspect the decrypted traffic to detect any malicious outbound communications that may indicate command-and-control activity.
33 comments · newest first
JA
Jade
11 months ago
Totally agree, signatures are key for identifying threats!
BI
Billi
11 months ago
Wait, can cipher suites really decrypt traffic like that? Sounds off.
PE
Peggy
11 months ago
Static IPs won't help with decryption, that's a no-go.
BE
Ben
11 months ago
I think digital certificates could work too, but not the best choice.
DO
Donte
12 months ago
Gotta go with signatures for detecting those malicious comms.
JE
Jesusita
12 months ago
I thought digital certificates were more about authentication than traffic analysis. I’m leaning towards signatures, but I’m not completely confident.
AI
Aileen
1 year ago
This seems similar to a practice question I did on network security devices. I feel like signatures might be the right answer, but I could be wrong.
UL
Ulysses
1 year ago
I remember studying about cipher suites in relation to encryption, but I can't recall if they specifically help with command-and-control detection.
DY
Dyan
1 year ago
I think this question is about detecting malicious traffic, but I'm not sure if it's about signatures or something else.
SH
Sharee
1 year ago
Okay, I've got a strategy for this. The key is to focus on the requirement to decrypt the traffic. That points to using some kind of encryption-related technology, so I'm leaning towards digital certificates or cipher suite.
IR
Irving
1 year ago
Hmm, I'm not sure about this one. Static IP addresses don't seem relevant, and I'm not confident about the other options. I'll have to review my notes on network security technologies to figure this out.
KA
Kathrine
1 year ago
This question seems straightforward. I think the answer is signatures, since that's the technology used to detect malicious communications.
MA
Margery
1 year ago
I'm a bit confused by this question. Decrypting traffic and detecting malicious communications - is that related to digital certificates or cipher suites? I'll have to think this through carefully.
CU
Curt
1 year ago
This question seems to be testing my understanding of identity and access management concepts. I'll need to carefully read through the scenario and think about which security feature it illustrates.
GI
Giuseppe
1 year ago
I think the answer is A. Business process swimlanes are a common section in the Blueprint.
HE
Herschel
2 years ago
Cipher suite, for sure. That's the way to go to peek under the hood of that encrypted traffic. Wink wink, nudge nudge.
WA
Walton
2 years ago
Hmm, I'm not sure static IP addresses would help with decrypting traffic. Gotta be one of the other options.
SA
Salome
2 years ago
That makes sense, it would help in detecting malicious outbound communications.
AI
Ailene
2 years ago
Yeah, they provide a way to verify the identity of the communicating parties.
YU
Yuette
2 years ago
Agreed, digital certificates are commonly used for secure communication.
SE
Selma
2 years ago
I think digital certificates would be the best option for decrypting traffic.
BI
Billye
2 years ago
D) cipher suite
SA
Salena
2 years ago
C) digital certificates
LE
Lettie
2 years ago
B) signatures
LU
Luisa
2 years ago
A) static IP addresses
BI
Billi
2 years ago
I think signatures could also help in detecting malicious communications.
AP
Apolonia
2 years ago
I'm not sure, but I think C) digital certificates could also be used for this task.
CH
Chantell
2 years ago
Digital certificates? Nah, that's more for authentication. I'd say cipher suite is the way to go to decrypt that traffic.
JA
Jamika
2 years ago
This seems like a classic case of network security monitoring. I'd go with option B - signatures.
RO
Rolland
2 years ago
I think digital certificates could also be useful in this scenario.
JE
Jesus
2 years ago
I agree, signatures are essential for detecting malicious communications.
MA
Mary
2 years ago
I agree with Burma, cipher suite makes sense for decrypting traffic.
BU
Burma
2 years ago
I think the answer is D) cipher suite.