How does a web proxy device provide data loss prevention (DLP) for an enterprise? Explanation: A web proxy device can inspect outgoing traffic as means of data loss prevention (DLP).…
Which Cisco appliance can be used to filter network traffic contents to report and deny traffic based on the web server reputation? Explanation: The Cisco Web Security Appliance (WSA) acts…
Which technique is necessary to ensure a private transfer of data using a VPN? Explanation: Confidential and secure transfers of data with VPNs require data encryption.
What is the purpose of Tor? Explanation: Tor is a software platform and network of peer-to-peer (P2P) hosts that function as routers. Users access the Tor network by using a…
Which technique would a threat actor use to disguise traces of an ongoing exploit? Explanation: The Network Time Protocol (NTP) uses a hierarchy of time sources to provide a consistent…
Explanation: Packet filtering ACLs use rules to filter incoming and outgoing traffic. These rules are defined by specifying IP addresses, port numbers, and protocols to be matched. Threat actors can…
Explanation: OSSEC is a host-based intrusion detection system (HIDS) that is integrated into Security Onion and actively monitors host system operation.
Explanation: Suricata is a NIDS tool that uses a signature-based approach. It also uses native multithreading, which allows the distribution of packet stream processing across multiple processor cores.
Explanation: Kibana is an interactive dashboard interface to Elasticsearch data. It allows querying of NSM data and provides flexible visualizations of that data. It provides data exploration and machine learning…
Explanation: PulledPork is a rule management utility included with Security Onion to automatically download rules for Snort.