MENU
Network forensics allows Investigators to inspect network traffic and logs to identify and locate the attack system
Network forensics can reveal: (Select three answers)
Suggested Answer: A, B, C
Get Premium 312-49 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
BL
Blossom
12 months ago
Yeah, it’s all about tracing the path and source!
CA
Carlee
12 months ago
Totally agree with A and B, but C seems a bit vague.
AN
Antonio
12 months ago
Wow, I didn't realize network forensics could be that revealing!
DE
Delsie
1 year ago
I think D is a stretch.
AN
Annelle
1 year ago
Definitely A, B, and C!
LY
Lynna
1 year ago
I don't recall hardware configuration being a focus in our studies. It seems less relevant compared to the other options.
RE
Rebbecca
1 year ago
I think intrusion techniques used by attackers might be one of the options too. We practiced a similar question in class about identifying methods used in breaches.
LA
Laine
1 year ago
I'm a bit unsure, but I feel like the path of the attack is also something we covered. It seems important for tracing back the steps of an intruder.
TE
Tegan
1 year ago
I remember studying that network forensics can definitely help identify the source of attacks. I think that's one of the answers.
AU
Augustine
1 year ago
Ah, I see what they're getting at here. Duplicate entries could happen if two different applications are referencing the same installation files or using the same applicability or detection rules. I feel pretty confident about this one.
MA
Maryrose
1 year ago
Hmm, this question seems a bit tricky. I'll need to carefully read through the options and think about how the "Create Rule" button in the Security Events tab would work.
JE
Jeanice
1 year ago
The span argument makes the most sense to me. That's how I would approach this question on the exam.
JO
Jordan
1 year ago
I remember practicing questions about SQL subsets, and Data Definition Language seemed more about creating and altering structures, not access control.