A small business wants to monitor network traffic without deploying additional hardware. They need to see real-time bandwidth usage by device and generate weekly reports. Which tool is most appropriate for this requirement?

A hardware packet capture appliance

A command-line packet analyzer used manually

A cloud-based SIEM that ingests firewall logs

A software-based network monitoring tool installed on an existing server

What is the primary purpose of using a baseline in anomaly detection?

To ensure all traffic is encrypted

To identify traffic that deviates from expected patterns

To replace the need for signature-based detection

To automatically block all unusual traffic

How is a network traffic baseline typically established?

By using the maximum traffic observed on the busiest day

By analyzing traffic patterns over a period of normal operation

By simulating an attack and measuring the response

By comparing traffic to a vendor-provided standard

A monitoring team is deploying a new IDS on a high-throughput backbone link. The IDS is dropping packets during peak hours, causing missed detections. The team has already tuned the IDS rules to reduce false positives. What is the most effective next step to reduce packet drops?

Deploy multiple IDS sensors in parallel, each handling a portion of the traffic

Disable the IDS during peak hours

Switch from packet-based to flow-based monitoring

Increase the IDS rule set to catch more threats

EC-CouncilNetwork Defense Essentials

Domain 7Objective 1

Network Traffic Monitoring Concepts NDE Practice Questions (Page 1)

Part of the Network Traffic Monitoring domain, which makes up ~11% of our current practice bank.

47questions here

10free pages

7concepts

Questions 1–5

1application · medium
A small business wants to monitor network traffic without deploying additional hardware. They need to see real-time bandwidth usage by device and generate weekly reports. Which tool is most appropriate for this requirement?
Select an answer first
2foundation · easy
What is the primary purpose of using a baseline in anomaly detection?
Select an answer first
3foundation · easy
How is a network traffic baseline typically established?
Select an answer first
4foundation · easy
A security analyst needs to investigate the content of a suspicious file transfer that occurred on the network. Which type of traffic data would provide the most detail?
Select an answer first
5expert · hard
A monitoring team is deploying a new IDS on a high-throughput backbone link. The IDS is dropping packets during peak hours, causing missed detections. The team has already tuned the IDS rules to reduce false positives. What is the most effective next step to reduce packet drops?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.