Not seeing any evidence of cryptomining. Not enough to validate bandwidth saturation. 3 source machines with private addresses targeting one destination machine with a private address would be a DDoS.
With source consisting of class C addresses and destination of class B. Seeing traffic from three machines target one machine in a different subnet would indicate anomalous activity. Upon further investigation, this may reveal itself to be benign or malicious. There isn't enough data to confirm that yet, which leads me to view this activity as anomalous.
Anomalous activity could refer to behavior that deviates from normal traffic patterns, which might be the case if there's unusual communication or activity detected.
B. Bandwidth saturation. This is based on the observed pattern of data transmission between the source (192.168.x.x) and the destination (172.16.2.8). In particular, the sudden spike in bytes sent and received, such as the large difference between 192.168.1.14 and 172.16.2.8 (64 bytes sent, 168468 bytes received), suggests a possible attempt to saturate the available bandwidth, which is typical of activities like data exfiltration or resource exhaustion.
small packets sent to the same IP address over time is a typical indicator or DoS
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.CS0-003 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Popeyes_Chicken
Highly Voted 3 months agoada26b1
Most Recent 3 weeks agostudy_study
3 months agoOJ_Ayinla
4 months ago