Network Traffic Monitoring Concepts NDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a common challenge when monitoring encrypted network traffic?

   • AEncrypted traffic is always malicious
   • BEncryption eliminates the need for monitoring
   • CThe traffic cannot be inspected without decryption or metadata analysis
   • DEncrypted traffic cannot be monitored at all
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of network traffic monitoring in network defense?

   • ATo encrypt all data transmitted across the network
   • BTo replace the need for other security controls like firewalls and IDS
   • CTo observe and analyze network traffic for security and performance insights
   • DTo block all incoming and outgoing traffic automatically
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security team needs to monitor traffic on a network segment that contains sensitive servers. The team wants to detect intrusions and analyze traffic patterns, but they are concerned about the performance impact of monitoring tools. Which approach minimizes the impact on the production network?

   • AUse active scanning to probe the servers for vulnerabilities
   • BDeploy a passive network tap and send traffic to an IDS
   • CEnable NetFlow on the servers' network interface
   • DInstall an inline IPS in front of the servers
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why can high network traffic volume be a challenge for monitoring systems?

   • AIt eliminates the need for baselines
   • BIt can overwhelm monitoring tools and cause dropped packets or missed events
   • CIt makes all traffic encrypted
   • DIt automatically triggers false positives
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key characteristic of packet data compared to flow data?

   • APacket data only stores metadata like IP addresses and ports
   • BPacket data includes the full payload of the communication
   • CPacket data is generated only by firewalls
   • DPacket data is always encrypted and unreadable
   Reveal Solution Discussion Select an answer first