Q: 18
Which two elements are assets in the role of attribution in an investigation? (Choose two.)
Options
Discussion
C tbh. Digital certificates let devices decrypt and inspect SSL/TLS traffic for threats, which is what the question wants. Not totally confident, but that's usually how C2 detection works at the perimeter.
Not B, C. Saw a similar question on a practice test and certificates are what let perimeter devices decrypt traffic for inspection.
C
Had something like this in a mock before, it's C. Digital certificates are needed for decryption on perimeter devices so they can scan the traffic. Pretty straightforward if you're familiar with SSL/TLS inspection. Let me know if anyone picked differently.
C
Official Cisco guides cover how digital certificates enable decryption for inspecting encrypted traffic. Practice labs are helpful to see how this lets network security devices catch command-and-control stuff. Pretty sure C is right, but open for discussion.
Official Cisco guides cover how digital certificates enable decryption for inspecting encrypted traffic. Practice labs are helpful to see how this lets network security devices catch command-and-control stuff. Pretty sure C is right, but open for discussion.
Be respectful. No spam.
