312-39V2: Certified SOC Analyst v2Demo

By ECCouncil · Question Mode

QuestionQ170

Proactive Threat Detection

Where can you locate the reputation IP database when you want OSSIM SIEM to monitor traffic from IP addresses with a known bad reputation?

  • A /etc/ossim/reputation
  • B /etc/ossim/siem/server/reputation/data
  • C /etc/ossim/server/reputation.data
  • D /etc/siem/ossim/server/reputation.data
Explanation

OSSIM uses /etc/ossim/server/reputation.data as the IP reputation data file for identifying traffic associated with known malicious or low-reputation IP addresses.

Community Discussion

No comments yet. Be the first to start the discussion!