Network Traffic Monitoring CCT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What does NetFlow provide that a full packet capture does not?

   • AThe ability to reconstruct files transferred over the network
   • BThe complete payload of every packet
   • CA summarized view of traffic flows, including source/destination IPs, ports, and byte counts
   • DThe exact timing of every individual packet
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   When analyzing a TCP packet, which header field indicates the destination application or service?

   • ADestination port number
   • BWindow size
   • CDestination IP address
   • DSequence number
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator is analyzing sFlow data from a core switch and notices that a single server is generating 90% of the total traffic on the network during business hours. The server is a database server that normally generates about 20% of traffic. What is the first step the administrator should take?

   • AIncrease the sFlow sampling rate to get more detailed data.
   • BVerify the sFlow data is accurate by checking the server's actual network utilization.
   • CBlock the server's IP address at the firewall.
   • DDisconnect the server from the network immediately.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary advantage of using sFlow for network monitoring?

   • AIt blocks malicious traffic based on flow analysis
   • BIt provides real-time flow statistics with low overhead by sampling packets
   • CIt replaces the need for SNMP in network management
   • DIt captures and stores the full payload of every packet for deep inspection
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which technique is used to copy traffic from a switch port to another port for monitoring purposes?

   • APort mirroring
   • BNetwork address translation (NAT)
   • CPacket filtering
   • DVLAN tagging
   Reveal Solution Discussion Select an answer first