312-39V2: Certified SOC Analyst v2

Question

Jake Carter, a SOC analyst at a financial institution in New York, is tasked with monitoring network traffic for possible data-exfiltration attempts. His team uses a security solution that inspects data packets in real time as they travel across the network. During an incident response, Jake finds that the solution has difficulty analyzing encrypted traffic, reducing its effectiveness at detecting threats concealed in secure communications. Which security control, with this known limitation, is the SOC team using?

Explanation

Packet filters inspect packet header information and, depending on their capabilities, packet contents as traffic passes through the network. Encryption obscures the payload, limiting their ability to identify threats or data exfiltration concealed within encrypted communications.

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ48

Community Discussion