Some Computers on a Network Are Infected with a Worm

Multiple Choice

Some computers on a network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet. You discover that this traffic always uses a certain source TCP port number. You need to identify which computers are infected.
Your solution should include detecting and identifying traffic that is sent by the worm and sending a notification to a network administrator that the infected computer needs to be repaired. Which of the following should you do?

A) Configure a WMI event trigger.
B) Configure a Network Monitor capture filter.
C) Configure a System Monitor Alert.
D) Configure a Network Monitor trigger.