Network Traffic Monitoring Concepts NDE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which metric measures the amount of data transmitted over a network in a given period of time?

   • APacket loss
   • BThroughput
   • CLatency
   • DBandwidth usage
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network administrator is investigating a suspected data exfiltration incident. The security team needs to determine which internal hosts communicated with a known malicious external IP over the past week, including the volume of data transferred. The organization retains NetFlow records and full packet captures, but the packet captures are only stored for 24 hours. Which data source should the administrator use to answer the question for the full week?

   • AFirewall syslog messages
   • BNetFlow records
   • CFull packet captures
   • DSystem event logs
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool is primarily used for capturing and analyzing individual packets on a network?

   • ASplunk
   • BSolarWinds NetFlow Traffic Analyzer
   • CNagios
   • DWireshark
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network team is setting up anomaly detection for a corporate network. They have collected traffic data for the past six months and noticed that bandwidth usage peaks every weekday between 9:00 AM and 5:00 PM, with lower usage on weekends. They want to reduce false positives. What should they do first?

   • ADisable monitoring during off-peak hours
   • BUse only packet loss as the anomaly metric
   • CSet a single average bandwidth threshold for all days
   • DEstablish separate baselines for weekdays and weekends
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A network administrator is monitoring a link that carries both real-time VoIP and bulk file transfers. The link is experiencing congestion. The administrator must ensure VoIP quality while allowing file transfers to continue. Which approach is most effective?

   • AMonitor packet loss and latency, then increase the link bandwidth
   • BPrioritize VoIP traffic using Quality of Service (QoS) policies
   • CBlock all file transfer traffic during peak hours
   • DUse flow data to identify the largest file transfer and terminate it
   Reveal Solution Discussion Select an answer first