Refer to the exhibit.An engineer is analyzing this Vlan0392-int12-239.pcap file in Wireshark after detecting a suspicious network activity.The origin header for the direct IP connections in the packets was initiated by a google chrome extension on a WebSocket protocol.The engineer checked message payloads to determine what information was being sent off-site but the payloads are obfuscated and unreadable.What does this STIX indicate?

Question

Exam-Answer · Accepted Answer

There is a possible data leak because payloads should be encoded as UTF-8 text

Question 31 of 76 from exam 350-201-CBRCOR: Performing CyberOps Using Cisco Security Technologies

Question

Answers

Explanations