Discuss ISC2 CISSP Exam Topic 6 Question 81

Which of the following will help identify the source internet protocol (IP) address of malware being exected on a computer?

AList of open network connections

BDisplay Transmission Control Protocol/Internet Protocol (TCP/IP) network configuration information.

CList of running processes

DDisplay the Address Resolution Protocol (APP) table.

Suggested Answer: B

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

46 comments · newest first

Graciela 11 months ago

Wait, can you really find an IP from open connections? Sounds sketchy!

Gladys 11 months ago

D? Really? That seems off.

Gerry 11 months ago

C won't help with IPs, just processes.

Dorthy 11 months ago

I think B is more useful for network info.

Mitsue 11 months ago

A is definitely the way to go for finding IP addresses.

Nobuko 12 months ago

The ARP table seems less relevant for identifying malware sources; it’s more about mapping IPs to MAC addresses, right?

Evangelina 12 months ago

I feel like running processes might not directly show the source IP, but it could give clues about which applications are communicating.

Charlene 12 months ago

I’m not entirely sure, but I think the TCP/IP configuration info is more about the local setup rather than identifying external IPs.

Rose 1 year ago

I remember studying that open network connections can show active connections, which might help identify the source IP of malware.

Rosalind 1 year ago

I'm a little confused by this question. I'm not sure if the running processes or the ARP table would really help identify the source IP. I think I'll focus on the network connection and configuration options, but I'll need to double-check my understanding.

Pamella 1 year ago

Okay, I've got this. The source IP address would be visible in the list of open network connections, so I'm going to go with option A. Displaying the TCP/IP configuration could also work, but the network connections seem like the more direct approach.

Rashida 1 year ago

This seems like a straightforward question about identifying the source IP address of malware. I think the key is to look at the network connections and configuration information, so I'll focus on options A and B.

Fletcher 1 year ago

Hmm, I'm a bit unsure about this one. I know we need to find the source IP, but I'm not sure if the list of running processes or the ARP table would be the most helpful. I'll have to think this through carefully.

Eliz 1 year ago

Ah, this is a good one. I remember seeing something about "DISABLE=True" in the zerotouch-config file before. I'm pretty confident that's the right answer.

Dorthy 1 year ago

I remember we discussed how the Triple Bottom Line (TBL) focuses on social, environmental, and economic impacts, which seems perfect for BB Laundry's community-driven model.

Makeda 1 year ago

Okay, let's see. The question is asking about the best KPIs to underpin the CSF of providing an improved service to senior executives. Based on the information given, I think the KPIs related to incident management and request fulfillment would be most relevant.

Mona 1 year ago

Oh, I know just the thing - a nice big can of network RAID should take care of that malware in no time!

France 1 year ago

↳ replying to Mona

D) Display the Address Resolution Protocol (APP) table

Bok 1 year ago

↳ replying to Mona

C) List of running processes

Kenneth 1 year ago

↳ replying to Mona

B) Display Transmission Control Protocol/Internet Protocol (TCP/IP) network configuration information.

My 1 year ago

↳ replying to Mona

A) List of open network connections

Reed 1 year ago

↳ replying to Mona

C) List of running processes

Alberta 1 year ago

↳ replying to Mona

A) List of open network connections

Alishia 1 year ago

I'm just gonna throw a network sniffer at the problem and see what pops up. Gotta love those good old packet captures!

Twana 1 year ago

↳ replying to Alishia

D) Display the Address Resolution Protocol (APP) table.

Mireya 1 year ago

↳ replying to Alishia

C) List of running processes

King 1 year ago

↳ replying to Alishia

B) Display Transmission Control Protocol/Internet Protocol (TCP/IP) network configuration information.

Willetta 1 year ago

↳ replying to Alishia

A) List of open network connections

Maryann 1 year ago

Haha, the ARP table, really? That's so old-school, Cora. I'm going with option A - the list of open network connections is where it's at for tracking down that malware.

Lynsey 1 year ago

But don't you think option B) Display TCP/IP network configuration information could also provide valuable information about the source IP address?

Cora 1 year ago

Ah, the ARP table in option D might be the golden ticket! I bet I can find the malware's IP address lurking in there somewhere.

Isabelle 1 year ago

↳ replying to Cora

Yeah, that's a good point. It's worth checking the ARP table for any suspicious activity.

Andra 1 year ago

↳ replying to Cora

I think option D is the way to go, the ARP table could reveal the IP address.

Holley 1 year ago

↳ replying to Cora

User 2: Good idea! That's where we might find the malware's IP address.

Tina 1 year ago

↳ replying to Cora

User 1: I think option D is the way to go. Let's check the ARP table.

Tamekia 1 year ago

I disagree, I believe option C) List of running processes is more likely to reveal the source IP address of malware.

Lynsey 1 year ago

I think option A) List of open network connections will help identify the source IP address of malware.

Tequila 1 year ago

But wouldn't checking the TCP/IP network configuration information also help identify the source IP address?

France 2 years ago

I disagree, I believe the correct answer is C) List of running processes.

Fidelia 2 years ago

Hmm, the list of running processes in option C could be helpful too. Maybe I can find the process ID of the malware and trace it back to the source IP.

Tequila 2 years ago

I think the answer is A) List of open network connections.

Fernanda 2 years ago

I think option B is the way to go. The TCP/IP network configuration should give me the IP address details I need to track down that pesky malware.

Kristel 1 year ago

↳ replying to Fernanda

I believe option D, displaying the Address Resolution Protocol table, could also help in identifying the source IP address of the malware.

Bobbye 1 year ago

↳ replying to Fernanda

I would go with option C, checking the list of running processes might reveal the source IP address of the malware.

Izetta 1 year ago

↳ replying to Fernanda

I think option A could also be helpful in identifying the source IP address of malware.

Aileen 1 year ago

↳ replying to Fernanda

I agree, option B is the best choice for identifying the source IP address of malware.

ISC2 CISSP Exam - Topic 6 Question 81 Discussion