ExamGecko
Question list
Search
Search

Question 26 - NSE7_ADA-6.3 discussion

Report
Export

Refer to the exhibit.

The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window:

How many incidents are generated?

A.
1
Answers
A.
1
B.
2
Answers
B.
2
C.
0
Answers
C.
0
D.
3
Answers
D.
3
Suggested answer: B

Explanation:

The rule evaluates multiple VPN logon failures within a ten-minute window. The rule will generate an incident if there are more than three VPN logon failures from the same source IP address within a ten-minute window. Based on the VPN failure events received within a ten-minute window, there are two incidents generated:

One incident for source IP address 10.10.10.10, which has four VPN logon failures at 09:01, 09:02, 09:03, and 09:04.

One incident for source IP address 10.10.10.11, which has four VPN logon failures at 09:06, 09:07, 09:08, and 09:09.

asked 18/09/2024
Rehan r
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first