ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 584 - N10-008 discussion

Report
Export

A company has been added to an unapproved list because of spam. The network administrator confirmed that a workstation was infected by malware. Which of the following processes did the administrator use to identify the root cause?

A.
Traffic analysis
Answers
A.
Traffic analysis
B.
Availability monitoring
Answers
B.
Availability monitoring
C.
Baseline metrics
Answers
C.
Baseline metrics
D.
Network discovery
Answers
D.
Network discovery
Suggested answer: A

Explanation:

One possible process that the administrator used to identify the root cause of the spam issue is traffic analysis. Traffic analysis is a technique that monitors and analyzes the network traffic that flows between devices or applications. Traffic analysis can help troubleshoot network problems by identifying the source, destination, volume, frequency, and content of the network packets12.

To use traffic analysis to identify the root cause of the spam issue, the administrator could follow these steps:

Install a traffic analysis tool on the server or a device that is connected to the same network as the server, such as Wireshark3, tcpdump4, or Microsoft Network Monitor5.

Start capturing the network traffic and filter it by using the IP address or hostname of the server, or by using a specific port or protocol that is used by the email service, such as SMTP (port 25), POP3 (port 110), or IMAP (port 143).

Analyze the filtered traffic and look for any signs of abnormal or malicious activity, such as high volume of outgoing emails, unknown recipients, suspicious attachments, or spam keywords.

Trace back the source of the spam emails to the infected workstation by using its IP address or MAC address.

Isolate and clean up the infected workstation by using an antivirus or malware removal tool.

The other options are not processes that the administrator used to identify the root cause of the spam issue. Availability monitoring is a technique that measures and reports the uptime and downtime of a network device or service. Availability monitoring can help troubleshoot network problems by detecting any failures or outages that affect the network performance. Baseline metrics are a set of standard measurements that establish the normal behavior or performance of a network device or service. Baseline metrics can help troubleshoot network problems by comparing the current state of the network with the expected state and identifying any deviations or anomalies.

Network discovery is a technique that scans and maps the network devices and services that are connected to a network. Network discovery can help troubleshoot network problems by providing a comprehensive and updated view of the network topology and configuration.

asked 02/10/2024
Sandor Alayon
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first