What should you do?

You are the network administrator for your company.A Windows Server 2003 computer named Router11 is used to connect the network to the Internet.
You find out that some computers on the network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet.This traffic always uses a certain source TCP port number.
You need to identify which computers are infected with the worm.You need to configure a solution on Router11 that will perform the following two tasks:
Detect and identify traffic that is sent by the worm.
Immediately send a notification to a network administrator that the infected computer needs to be repaired.
What should you do?

You are the network administrator for your company.A Windows Server 2003 computer named Router11 is used to connect the network to the Internet.
You find out that some computers on the network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet.This traffic always uses a certain source TCP port number.
You need to identify which computers are infected with the worm.You need to configure a solution on Router11 that will perform the following two tasks:
Detect and identify traffic that is sent by the worm.
Immediately send a notification to a network administrator that the infected computer needs to be repaired.
What should you do?

A.
Configure a WMI event trigger.

B.
Configure a Network Monitor capture filter.

C.
Configure a Network Monitor trigger.

D.
Configure a System Monitor alert.



Leave a Reply 0

Your email address will not be published. Required fields are marked *