Exam SY0-601 topic 1 question 439 discussion

D. Packet capture

Packet capture, also known as packet sniffing or network traffic analysis, can be used to detect a hacker who is stealing company data over port 80. By capturing and analyzing network packets, security teams can inspect the actual data being transmitted over the network, identify any unusual or unauthorized activities, and potentially uncover signs of data exfiltration or suspicious behavior.

Port 80 is for HTTP which is not encrypted, so capturing the packets will allow you to view the contents for any relevant data

Packet capture is the best option for detecting a hacker who is stealing company data over port 80. Packet capture is the process of intercepting and logging network traffic. It allows security analysts to capture and analyze packets that are transmitted over a network. By analyzing the captured packets, security analysts can identify the source and destination of network traffic, as well as the contents of the packets. In this scenario, packet capture can be used to capture network traffic over port 80, which is commonly used for web traffic. By analyzing the captured packets, security analysts can identify any suspicious traffic that may indicate a hacker stealing company data.

To detect a hacker who is stealing company data over port 80, D. Packet capture can be used. Packet capture is a technique for intercepting and logging network traffic. By capturing and analyzing the packets sent over port 80, security analysts can identify any suspicious activity, such as the exfiltration of company data by a hacker. This information can then be used to investigate and mitigate the threat.

-D is correct D. Packet capture can be used to detect a hacker who is stealing company data over port 80. Packet capture involves capturing and analyzing network traffic to identify malicious activity. By capturing packets sent and received over port 80, which is commonly used for HTTP traffic, it is possible to identify any suspicious activity that could indicate a hacker stealing company data.