CompTIA Security+ (SY0-601) — Question 240

A security analyst is concerned about traffic initiated to the dark web from the corporate LAN. Which of the following networks should the analyst monitor?

Answer options

• A. SFTP
• B. AIS
• C. Tor
• D. IoC

Correct answer: C

Explanation

The correct answer is C, Tor, as it is specifically designed for anonymous browsing and is commonly associated with accessing the dark web. The other options, such as SFTP (Secure File Transfer Protocol), AIS (Automated Information Systems), and IoC (Indicators of Compromise), do not directly relate to dark web traffic and thus are not relevant for monitoring in this context.