ISC2 Exam CISSP Topic 6 Question 81 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 81
Topic #: 6

Which of the following will help identify the source internet protocol (IP) address of malware being exected on a computer?

AList of open network connections

BDisplay Transmission Control Protocol/Internet Protocol (TCP/IP) network configuration information.

CList of running processes

DDisplay the Address Resolution Protocol (APP) table.

Show Suggested Answer

Suggested Answer: B

by Malinda at Jan 26, 2024, 02:45 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alishia

22 hours ago

I'm just gonna throw a network sniffer at the problem and see what pops up. Gotta love those good old packet captures!

upvoted 0 times

...

Maryann

5 days ago

Haha, the ARP table, really? That's so old-school, Cora. I'm going with option A - the list of open network connections is where it's at for tracking down that malware.

upvoted 0 times

...

Lynsey

7 days ago

But don't you think option B) Display TCP/IP network configuration information could also provide valuable information about the source IP address?

upvoted 0 times

...

Cora

8 days ago

Ah, the ARP table in option D might be the golden ticket! I bet I can find the malware's IP address lurking in there somewhere.

upvoted 0 times

...

Tamekia

8 days ago

I disagree, I believe option C) List of running processes is more likely to reveal the source IP address of malware.

upvoted 0 times

...

Lynsey

10 days ago

I think option A) List of open network connections will help identify the source IP address of malware.

upvoted 0 times

...

Tequila

12 days ago

But wouldn't checking the TCP/IP network configuration information also help identify the source IP address?

upvoted 0 times

...

France

13 days ago

I disagree, I believe the correct answer is C) List of running processes.

upvoted 0 times

...

Fidelia

14 days ago

Hmm, the list of running processes in option C could be helpful too. Maybe I can find the process ID of the malware and trace it back to the source IP.

upvoted 0 times

...

Tequila

17 days ago

I think the answer is A) List of open network connections.

upvoted 0 times

...

Fernanda

17 days ago

I think option B is the way to go. The TCP/IP network configuration should give me the IP address details I need to track down that pesky malware.

upvoted 0 times

...