Free Preparation Discussions
MENU
VMware 6V0-21.25 Exam - Topic 7 Question 2 Discussion
Topic #: 7
Which of the following make up the Network Detection and Response capabilities of VMware vDefend? (Select all that apply)
VMware vDefend NDR relies on a diverse set of telemetry to build a comprehensive picture of an attack campaign. Its core correlation capabilities are built by ingesting three specific types of security events from the distributed data center:
Anomaly Events (Option C): Fed by the Network Traffic Analysis (NTA) engine, looking for behavioral deviations like DGA or unusual data exfiltration.
Threat Detection Events (Option B): Fed by the Intrusion Detection and Prevention Systems (IDS/IPS), looking for known exploit signatures traversing the network.
Malware Events (Option A): Fed by the Distributed and Gateway Malware Prevention engines, looking for malicious file transfers and sandbox detonations.
Encryption/Decryption events (Option D) are related to TLS Proxy/Inspection capabilities and do not constitute the foundational threat event categories ingested by the NDR correlation engine.
Roslyn
4 days agoJess
9 days agoDominga
14 days agoEura
19 days agoBurma
25 days agoEvette
30 days agoKarl
1 month agoHana
1 month agoShantay
2 months agoArgelia
2 months agoLeoma
2 months agoJose
2 months agoChara
2 months agoOrville
2 months agoVilma
4 months agoAngelyn
4 months agoVirgie
4 months ago