2.2 Describe Security Monitoring and Telemetry Technologies 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · medium

   What is the primary benefit of using NetFlow or IPFIX for network visibility compared to packet capture?

   • AIt is more scalable and less resource-intensive for large networks
   • BIt provides full packet payloads for forensic analysis
   • CIt provides real-time alerts for every security event
   • DIt captures every packet without loss
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   Which telemetry source is most appropriate for capturing the full payload of a single suspicious packet for deep inspection?

   • ASyslog
   • BSNMP traps
   • CPacket capture
   • DNetFlow
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   Which capability distinguishes an EDR solution from a traditional antivirus product?

   • AThe ability to block malicious websites
   • BContinuous monitoring and response capabilities beyond signature-based detection
   • CThe ability to encrypt files on the endpoint
   • DThe ability to manage firewall rules on the endpoint
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network administrator needs to monitor the health of core routers and switches, including CPU utilization, memory usage, and interface errors. They want to collect these metrics at regular intervals and alert when thresholds are exceeded. Which monitoring approach is best suited for this requirement?

   • ASNMP polling with a management station
   • BSyslog forwarding of all device logs
   • CFull packet capture on the management interface
   • DNetFlow export to a flow collector
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   Which capability is unique to a SIEM compared to a simple log collector?

   • AStoring logs in a centralized repository
   • BReceiving syslog messages from network devices
   • CProviding a graphical user interface
   • DCorrelation of events across different sources to identify complex attack patterns
   Reveal Solution Discussion Select an answer first