Exam 312-39 topic 1 question 87 discussion

Actual exam question from ECCouncil's 312-39

Question #: 87
Topic #: 1

John as a SOC analyst is worried about the amount of Tor traffic hitting the network. He wants to prepare a dashboard in the SIEM to get a graph to identify the locations from where the TOR traffic is coming.
Which of the following data source will he use to prepare the dashboard?

A. DHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution.
B. IIS/Web Server logs with IP addresses and user agent IPtouseragent resolution.
C. DNS/ Web Server logs with IP addresses.
D. Apache/ Web Server logs with IP addresses and Host Name.

Show Suggested Answer

Suggested Answer: D 🗳️

by SchFiftySchFive at March 20, 2023, 7:52 p.m.

Comments

Submit Cancel

Berro_b

1 month, 2 weeks ago

Selected Answer: A

p 488 Data Source DHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution.

upvoted 1 times

...

abode144

9 months ago

Selected Answer: A

aaaaaaaaaa

upvoted 1 times

...

howard2017

11 months, 2 weeks ago

Correct answer is A

upvoted 2 times

...

SchFiftySchFive

1 year, 3 months ago

Correct answer is A. DHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution. Official EC-Council Courseware - Volume 1 - pg. 488

upvoted 4 times

...