Baseline Traffic Analysis and Signature Identification NDE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In network defense, what is meant by 'baseline traffic'?

   • AThe traffic that must be blocked to protect the network from known threats
   • BThe normal network behavior pattern established over time for comparison
   • CThe traffic generated by security tools during an active attack simulation
   • DThe maximum traffic volume the network can handle before performance degrades
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network administrator is setting up a baseline for a new remote office that will have a mix of local and cloud-based applications. The office will be operational 24/7, but usage is expected to be highest during business hours. The administrator wants to ensure the baseline captures both peak and off-peak periods. What is the best approach?

   • ACapture traffic only during business hours for one week.
   • BCapture traffic for one day and use that as the baseline.
   • CCapture traffic only during the busiest hour each day.
   • DCapture traffic continuously for at least one full week, including weekends.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a network that is stable, but the security team wants to establish a baseline for a new monitoring system. They have a limited budget and need to decide how long to capture traffic. The team wants to detect anomalies that occur on a weekly basis, such as a monthly report that generates a large spike. What is the best approach?

   • ACapture traffic for at least one full month to include the monthly report spike.
   • BCapture traffic for one week and exclude the monthly report spike as an outlier.
   • CCapture traffic for a year to ensure all possible events are included.
   • DCapture traffic for one day and use the average as the baseline.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A network engineer is preparing to deploy a new monitoring system. The engineer wants to establish a baseline for the network to detect future anomalies. Which statement best describes what the baseline should represent?

   • AThe maximum traffic load the network can handle without performance degradation.
   • BThe minimum traffic level required to keep the network operational.
   • CThe security policy that defines acceptable use of the network.
   • DThe typical network behavior pattern established over time for comparison.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is about to deploy a new application that is expected to significantly increase network traffic. The security team wants to establish a baseline before the deployment to compare against after. What is the best approach?

   • AUse the vendor's expected traffic estimates as the baseline.
   • BCapture traffic only after the deployment to establish the new baseline.
   • CCapture traffic for a week before the deployment, then capture for a week after, and compare the two.
   • DCapture traffic for one hour before the deployment.
   Reveal Solution Discussion Select an answer first