Eccouncil Exam 312-39 Topic 7 Question 4 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 4
Topic #: 7

John as a SOC analyst is worried about the amount of Tor traffic hitting the network. He wants to prepare a dashboard in the SIEM to get a graph to identify the locations from where the TOR traffic is coming.

Which of the following data source will he use to prepare the dashboard?

ADHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution.

BIIS/Web Server logs with IP addresses and user agent IPtouseragent resolution.

CDNS/ Web Server logs with IP addresses.

DApache/ Web Server logs with IP addresses and Host Name.

Show Suggested Answer

Suggested Answer: D

by Joanna at May 05, 2022, 12:04 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!