The Analyst Has Created a Correlation Rule to Correlate Events

question 6

Multiple Choice

The analyst has created a correlation rule to correlate events from Anti-Virus (AV) , Network Intrusion Prevention (NIPS) and the firewall. While reviewing just firewall events, the analyst notices a large spike in outbound Command and Control traffic; however, the correlation rule is not triggering. The analyst then looks at the Network IPS and the Anti-Virus views and notices there are no alerts for this traffic. Which of the following features of NIPS and AV are most likely turned off?

• A) Alerting
• B) Heuristics
• C) Advanced Persistent Threats (APT)
• D) Automatic DAT updates

---

Definitions:

Total Asset Turnover

A financial ratio that measures the efficiency of a company's use of its assets in generating sales revenue; calculated by dividing sales revenue by total assets.

Equity Multiplier

The equity multiplier is a financial ratio that measures a company's leverage by dividing its total assets by its total shareholders' equity, indicating how much of the assets are financed by equity.

Market-To-Book Ratio

A financial valuation metric comparing a company's stock market value to its book value.

Price-Earnings Ratio

A valuation metric that compares a company's share price to its per-share earnings, used to evaluate if a stock is over or under-valued.