A Security Analyst Is Performing a Manual Audit of Captured

question 98

Multiple Choice

A security analyst is performing a manual audit of captured data from a packet analyzer. The analyst looks for Base64 encoded strings and applies the filter http.authbasic. Which of the following BEST describes what the analyst is looking for?

• A) Unauthorized software
• B) Unencrypted credentials
• C) SSL certificate issues
• D) Authentication tokens

---

Definitions:

Evidence

Evidence refers to information, facts, or data presented to support a claim, assertion, or hypothesis.

Generalization

A broad statement or conclusion that applies to many instances, derived from specific cases.

Positive Instance

An item that belongs to a given class and possesses the trait attributed to the class by a given generalization.

Negative Instance

An item that belongs to a given class and does not possess the trait attributed to the class by a given generalization.