Network Traffic Monitoring Concepts NDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which activity is an example of network traffic monitoring?

   • ASetting up a VPN for remote employees
   • BConfiguring a router to prioritize VoIP traffic
   • CInstalling antivirus software on all endpoints
   • DReviewing firewall logs to identify blocked connection attempts
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security operations center (SOC) is monitoring a network that carries a mix of encrypted HTTPS traffic and unencrypted legacy application traffic. The SOC has observed a spike in traffic volume to a file-sharing site, but the existing monitoring tool only reports flow data and cannot inspect the payload. The team needs to determine whether the spike is malicious or just normal business use. Which approach is the most effective?

   • ADeploy a passive SSL/TLS interception proxy to decrypt all HTTPS traffic
   • BRely solely on the flow data's destination IP reputation
   • CCorrelate the flow data with user identity and endpoint logs to determine if the traffic is authorized
   • DBlock the file-sharing site immediately to stop the spike
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which tool is commonly used to collect and analyze flow data, such as NetFlow, to provide visibility into traffic patterns?

   • ANmap
   • Btcpdump
   • CSolarWinds NetFlow Traffic Analyzer
   • DPRTG Network Monitor
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A network monitoring system has been operating for six months. The administrator notices that the system is generating many alerts for a server that runs a batch job every hour, causing a predictable spike in CPU usage and network traffic. The alerts are for 'unusual CPU usage' and 'unusual network traffic'. The administrator wants to reduce false positives without losing visibility. What is the best approach?

   • AIgnore the alerts because they are predictable
   • BCreate a baseline exception for the batch job's schedule
   • CDisable alerts for the server
   • DIncrease the alert thresholds for the server
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A network administrator is comparing the performance of two internet links. Link A has a higher bandwidth capacity but higher latency, while Link B has lower bandwidth but lower latency. The administrator needs to determine which link provides better performance for real-time video conferencing. Which metric is most important for this decision?

   • APacket loss
   • BThroughput
   • CLatency
   • DBandwidth capacity
   Reveal Solution Discussion Select an answer first