An IDS was unable to detect malicious network traffic during a recent security incident, even though all traffic was being sent using HTTPS. As a result, a website used by employees was compromised. Which of the following detection mechanisms would allow the IDS to detect an attack like this one in the future?
An inspection proxy, also known as an SSL/TLS inspection proxy, can decrypt HTTPS traffic, allowing the IDS to analyze the content for malicious activity. This method ensures that encrypted traffic can be inspected without compromising the security of the data in transit. The inspection proxy will re-encrypt the data before sending it on to its destination, maintaining the confidentiality of the communication while enabling security tools to perform their functions.
CompTIA CASP+ CAS-004 Exam Objectives: Section 3.3: Integrate network and security components and implement security controls.
CompTIA CASP+ Study Guide, Chapter 7: Analyzing Security Incidents.
Leslee
2 months agoOtis
2 months agoLeontine
2 months agoGlory
3 months agoPansy
2 months agoLarae
2 months agoSteffanie
2 months agoKimi
3 months agoShakira
3 months agoLenna
2 months agoEffie
2 months agoPansy
2 months agoDahlia
2 months ago