Free CompTIA CySA+ CS0-003 Practice Question

During a routine check, a security analyst notices that several outbound connections to unfamiliar external IP addresses have been made from a server within the company's network. There is no documented business need for these communications. Which tool should the analyst use to capture and analyze the traffic between the server and these IP addresses for further investigation?

  • WHOIS

  • tcpdump

  • Wireshark

  • Simple Network Management Protocol (SNMP)

This question's topic:
CompTIA CySA+ CS0-003 / 
Security Operations
Your Score:

Check or uncheck an objective to set which questions you will receive.

Wipe Score
SAVE $49
CompTIA Cybersecurity Analyst Voucher (CySA+ CS0-003)
$404.00 $355.00