Exam 312-50v10 topic 1 question 312 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 312
Topic #: 1

An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?

A. Protocol analyzer
B. Network sniffer
C. Intrusion Prevention System (IPS)
D. Vulnerability scanner

Show Suggested Answer

Suggested Answer: A 🗳️

by TrendMicroDLPSSucks at Aug. 28, 2020, 3:32 p.m.

Comments

Submit Cancel

Jasonxxx

5 months, 4 weeks ago

A. Protocol analyzer

upvoted 1 times

Jasonxxx

5 months, 4 weeks ago

I think answer is C C. Intrusion Prevention System (IPS)

upvoted 1 times

...

TrendMicroDLPSSucks

1 year, 9 months ago

A protocol analyzer is a tool (hardware or software) used to capture and analyze signals and data traffic over a communication channel. Such a channel varies from a local computer bus to a satellite link, that provides a means of communication using a standard communication protocol (networked or point-to-point).

upvoted 3 times

...