Computer Hacking Forensic Investigator (CHFI v10) — Question 529

Which of the following Event Correlation Approach is an advanced correlation method that assumes and predicts what an attacker can do next after the attack by studying the statistics and probability and uses only two variables?

Answer options

• A. Bayesian Correlation
• B. Vulnerability-Based Approach
• C. Rule-Based Approach
• D. Route Correlation

Correct answer: A

Explanation

The correct answer, Bayesian Correlation, is an advanced method that leverages statistical analysis to forecast potential attacker behavior. The other options, such as Vulnerability-Based and Rule-Based approaches, do not specifically focus on predicting future actions based on statistical probabilities, nor do they utilize only two variables.