Network Traffic Monitoring Concepts NDE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which type of network traffic data is typically generated by devices such as routers, switches, and servers to record events like logins, configuration changes, or errors?

   • ASignature data
   • BPacket data
   • CLog data
   • DFlow data
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is investigating a suspected data exfiltration. They need to determine whether sensitive data was actually transmitted and to which external IP address. The team has flow logs and firewall logs, but no packet captures. What is the most important limitation they will face?

   • AThey cannot verify the content of the transmitted data
   • BThey cannot determine the time of the transfer
   • CThey cannot identify the source host
   • DThey cannot determine the destination IP address
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A network administrator is setting up monitoring for a new office. The administrator wants to detect when the network is being used abnormally, such as a sudden spike in traffic. What should the administrator do first?

   • ASet the anomaly threshold to the highest possible value
   • BInstall a packet capture tool and start capturing all traffic
   • CConfigure the firewall to block all external traffic
   • DCollect traffic data over a period of normal operation to establish a baseline
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A network administrator is monitoring a WAN link that connects two offices. Users report slow performance, but the link is not saturated (bandwidth usage is below 50%). The monitoring tool shows low packet loss and normal latency. However, the administrator notices that the TCP window size is frequently small. What is the most likely cause of the performance issue?

   • ANetwork latency is too high
   • BInsufficient bandwidth on the link
   • CHigh packet loss on the link
   • DApplication-level congestion or protocol inefficiency
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which type of network traffic data provides a summary of communication sessions, such as source and destination IP addresses, ports, and protocol, without capturing the full content?

   • AConfiguration data
   • BFlow data
   • CPacket data
   • DLog data
   Reveal Solution Discussion Select an answer first