Question 161

What should a security analyst consider when comparing inline traffic interrogation with traffic tapping to determine which approach to use in the network?
  • Question 162

    What is a difference between inline traffic interrogation and traffic mirroring?
  • Question 163

    What is the difference between inline traffic interrogation (TAPS) and traffic mirroring (SPAN)?
  • Question 164

    Drag and drop the access control models from the left onto the correct descriptions on the right.

    Question 165

    Refer to the exhibit.

    An engineer is analyzing a PCAP file after a recent breach An engineer identified that the attacker used an aggressive ARP scan to scan the hosts and found web and SSH servers. Further analysis showed several SSH Server Banner and Key Exchange Initiations. The engineer cannot see the exact data being transmitted over an encrypted channel and cannot identify how the attacker gained access How did the attacker gain access?