Monitoring Tools CNX-001 Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which of the following is a common notification channel used by alerting systems?

   • AEmail
   • BSyslog
   • CNetFlow
   • DSNMP trap
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which component is commonly used to display a metric such as CPU utilization on a dashboard?

   • AA packet capture file
   • BA firewall rule
   • CA line chart
   • DA syslog server
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network engineer is troubleshooting a sudden increase in outbound traffic from a cloud VM. The engineer examines the flow logs and notices that the VM is communicating with a large number of external IP addresses on port 443. What is the most likely interpretation?

   • AThe VM is running a legitimate web server
   • BThe VM is part of a botnet conducting a distributed denial-of-service attack
   • CThe VM is backing up data to a cloud storage service
   • DThe VM is performing a routine software update
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network administrator is investigating a security incident. The firewall logs show that a specific internal IP address attempted to connect to multiple external IP addresses on port 22. The administrator needs to determine if this is a brute-force attack. Which log data is most useful for this analysis?

   • AThe packet size and protocol type
   • BThe number of connection attempts and the timestamps
   • CThe MAC address of the source device
   • DThe source and destination IP addresses and ports
   Reveal Solution Discussion Select an answer first