2.2 Identify the Types of Data Provided by These Technologies 200-201 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   An email security gateway logs that a message from 'attacker@example.com' to 'user@company.com' was quarantined because it contained a malware attachment. Which data types are present in this log?

   • ASender/recipient information, malware detection result, and policy action
   • BURL category and reputation score
   • CApplication identification and user identity
   • DFlow record with byte and packet counts
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A network analyst is investigating a possible malware infection and needs to see the full contents of packets exchanged with a command-and-control server. The analyst also wants to know the timestamp and interface on which each packet was captured. Which technology provides this data?

   • ATCP dump
   • BNext-generation firewall
   • CWeb content filtering
   • DNetFlow
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst is reviewing logs to determine how many emails from a specific external sender were quarantined as spam and how many were delivered with a malware-detection warning. Which data source provides this information?

   • ANetFlow records
   • BNext-generation firewall logs
   • CWeb content filtering logs
   • DEmail content filtering logs
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security analyst is investigating a DDoS attack and needs to identify the top source IP addresses generating the most packets and bytes over a 5-minute window. Which data source provides this aggregated flow information?

   • ATraditional stateful firewall logs
   • BNetFlow records
   • CFull packet capture
   • DNext-generation firewall application logs
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which data types are provided by application visibility and control (AVC) technologies?

   • AApplication identification, usage statistics, and policy enforcement logs
   • BConnection state and session information for allowed and denied traffic
   • CURL categories and reputation scores for web requests
   • DPacket headers and payloads for every packet
   Reveal Solution Discussion Select an answer first