Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 8 : Network Forensics
Questions available : 133		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 580
Which of the following Event Correlation Approach checks and compares all the fields systematically and intentionally for positive and negative correlation with each other to determine the correlation across one or multiple fields?
A:    Automated Field Correlation
B:    Rule-Based Approach
C:    Field-Based Approach
D:    Graph-Based Approach
Explanation: Event Correlation Approaches Automated Field Correlation: This method checks and compares all the fields systematically for positive and negative correlation with one another, to determine correlation across one or multiple fields. Graph-Based Approach: This approach constructs a graph with the system components as nodes and dependencies between these components as edges Rule-Based Approach: In this approach, events are correlated according to a set of rules as follows: condition -> action Field-Based Approach: This is a basic approach where specific events are compared with single or multiple fields in the normalized data Refer https://victorylearner.com/notes.php?catid=CC&nid=107 for detailed note