200-201 Question 54

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The TOR (The Onion Router) network is often used to anonymize traffic on the internet, which can be beneficial for protecting privacy, but it can also be used to circumvent network security measures, such as firewalls. When traffic with a known TOR exit node occurs on a network, it means that a user is likely attempting to use TOR to bypass network restrictions and access restricted content or services. Ransomware communicating after infection, users downloading copyrighted content, and data exfiltration are all potential security threats that could occur on a network, but they are not directly related to traffic with a known TOR exit node.

• Chose D2

  TOR (The Onion Router) It is an open-source privacy network that enables anonymous web browsing. The Tor browser enables people to have access to the dark web. TOR Exit Node Tor moves encrypted traffic across a network of Tor servers and provides anonymity to users. A Tor exit node is the final node that routes Tor traffic to a destination. Circumvention The process of avoiding something, especially cleverly or illegally. Circumvention Tools They are designed to bypass online censorship such as simple web proxies, virtual private network service, and so on. Frequently used in countries whose governments impose heavy Internet censorship.

• 2

  The question is What is the Impact? NIST states "The magnitude of harm that can be expected to result from the consequences of unauthorized disclosure of information, unauthorized modification of information, unauthorized destruction of information, or loss of information or information system availability." To me the biggest IMPACT here from TOR traffic is , Data Exfiltration. As an analyst, I would be more concerned with untraceable traffic like TOR, stealing data. I say Data Exfiltration.