Eccouncil 312-85 Exam - Topic 11 Question 22 Discussion

Actual exam question for Eccouncil's 312-85 exam

Question #: 22
Topic #: 11

A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper analysis by him, the same information can be used to detect an attack in the network.

Which of the following categories of threat information has he collected?

AAdvisories

BStrategic reports

CDetection indicators

DLow-level data

Show Suggested Answer

Suggested Answer: C

by Lashawnda at Jul 31, 2022, 01:56 PM

Limited Time Offer

25%

Off

Get Premium 312-85 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erick

4 months ago

I agree, it's all about how you analyze the data!

upvoted 0 times

...

Latia

4 months ago

Wait, can log files really be that useful?

upvoted 0 times

...

Peter

4 months ago

Definitely not advisories, those are different.

upvoted 0 times

...

Janae

4 months ago

I think it's detection indicators!

upvoted 0 times

...

Julian

4 months ago

Sounds like low-level data to me.

upvoted 0 times

...

Timothy

5 months ago

"Strategic reports" seems too broad for this scenario; I feel like the logs are more about specific indicators rather than high-level summaries.

upvoted 0 times

...

Maddie

5 months ago

I remember a practice question about threat information categories, and "Detection indicators" was emphasized as crucial for identifying threats.

upvoted 0 times

...

Sherita

5 months ago

I'm not entirely sure, but "Low-level data" sounds like it could fit, since the logs are often raw data that needs interpretation.

upvoted 0 times

...

Malinda

5 months ago

I think the logs collected might fall under "Detection indicators," since they help identify potential attacks after analysis.

upvoted 0 times

...

Alton

5 months ago

Hmm, I'm a bit unsure about this one. Let me think it through - I know HTTPS is a common backup protocol, but I'm not sure if it's specifically supported by HPE OneView.

upvoted 0 times

...

Roselle

5 months ago

I'm not entirely sure about the options. Maybe option B is relevant too, since mental health can definitely influence physical activity in older adults?

upvoted 0 times

...

Casie

5 months ago

Ah, I see now. The surface plate is used for the first three options - referencing length and parallelism, and establishing a datum plane. The other two don't seem to be common applications.

upvoted 0 times

...