200-201: Understanding Cisco Cybersecurity Operations Fundamentals

By Cisco · Question Mode

QuestionQ38

Network Intrusion Analysis

Question Image

Refer to the exhibit. An engineer is investigating an intrusion and analyzing the pcap file. Which two key elements must the engineer consider?

Choose two
Explanation

A SYN flood is indicated by a rapid, sustained stream of TCP SYN packets directed at the target, with little variation in their arrival times. Repeated TCP segment length of 120 and window size of 64 are also notable uniform characteristics of the traffic, consistent with automated attack traffic.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!