ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 34 Topic 4 Discussion

ECCouncil Computer Hacking Forensic Investigator 312-49 Question # 34 Topic 4 Discussion

312-49 Exam Topic 4 Question 34 Discussion:
Question #: 34
Topic #: 4

Which of the following Event Correlation Approach checks and compares all the fields systematically and intentionally for positive and negative correlation with each other to determine the correlation across one or multiple fields?


A.

Rule-Based Approach


B.

Automated Field Correlation


C.

Field-Based Approach


D.

Graph-Based Approach


Get Premium 312-49 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.