Which two elements are used for profiling a network? (Choose two.)
Correct Answer: A,B
A network profile should include some important elements, such as the following: Total throughput - the amount of data passing from a given source to a given destination in a given period of time Session duration - the time between the establishment of a data flow and its termination Ports used - a list of TCP or UDP processes that are available to accept data Critical asset address space - the IP addresses or the logical location of essential systems or data Profiling data are data that system has gathered, these data helps for incident response and to detect incident Network profiling = throughput, sessions duration, port used, Critical Asset Address Space Host profiling = Listening ports, logged in accounts, running processes, running tasks,applications
Question 107
Refer to the exhibit. Which technology generates this log?
Correct Answer: D
Question 108
What is a benefit of agent-based protection when compared to agentless protection?
Correct Answer: C
Question 109
How does a certificate authority impact security?
Correct Answer: D
A certificate authority is a computer or entity that creates and issues digital certificates. CA do not "authenticate" it validates. "D" is wrong because The digital certificate validate a user. CA --> DC --> user, server or whatever.
Question 110
What is the difference between vulnerability and risk?