An IDS was unable to detect malicious network traffic during a recent security incident, even though all traffic was being sent using HTTPS. As a result, a website used by employees was compromised. Which of the following detection mechanisms would allow the IDS to detect an attack like this one in the future?
An inspection proxy, also known as an SSL/TLS inspection proxy, can decrypt HTTPS traffic, allowing the IDS to analyze the content for malicious activity. This method ensures that encrypted traffic can be inspected without compromising the security of the data in transit. The inspection proxy will re-encrypt the data before sending it on to its destination, maintaining the confidentiality of the communication while enabling security tools to perform their functions.
CompTIA CASP+ CAS-004 Exam Objectives: Section 3.3: Integrate network and security components and implement security controls.
CompTIA CASP+ Study Guide, Chapter 7: Analyzing Security Incidents.
Leslee
27 days agoOtis
28 days agoLeontine
29 days agoGlory
1 months agoPansy
18 days agoLarae
21 days agoSteffanie
1 months agoKimi
2 months agoShakira
2 months agoLenna
17 days agoEffie
25 days agoPansy
29 days agoDahlia
1 months ago