200-201 Question 366
Select 4During routine network monitoring, a cybersecurity analyst is tasked with profiling the organization's network to identify potential threats. Which of the following elements can be used to establish a comprehensive network profile?
- A
IP address ranges used within the network
- B
Operating systems installed on end-user devices
- C
The number of employees in the organization
- D
Traffic patterns and protocols used on the network
- E
Devices connected to the network, including IoT devices
- F
The total number of cybersecurity incidents logged in the past year
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Network profiling involves gathering detailed information about the network's architecture, connected devices, operating systems, and traffic behavior to establish a baseline for normal activity. Elements like IP address ranges, operating systems, traffic patterns, and connected devices are essential for this process, while unrelated metrics like employee count or historical incident logs are not directly useful.
- A. Correct.
IP address ranges are crucial for identifying the scope of the organization's network and detecting anomalies like unauthorized access.
- B. Correct.
Operating systems provide insight into potential vulnerabilities specific to software versions and configurations.
- C. Incorrect.
The number of employees is not directly related to network profiling as it does not provide actionable information about the network infrastructure.
- D. Correct.
Traffic patterns and protocols help in understanding normal network behavior, which is essential for identifying suspicious activities.
- E. Correct.
Connected devices, including IoT devices, are key elements in network profiling as they represent potential attack surfaces.
- F. Incorrect.
The total number of cybersecurity incidents logged in the past year reflects historical data but does not contribute to real-time network profiling.