Same for: 10.1.5 Check Your Understanding – Identify Types of Network Monitoring Data
1. Which type of network monitoring data includes detailed protocol and payload information for all traffic on a network segment?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Full packet capture data includes detailed protocol and payload information for all traffic on a network segment.
2. What type of network monitoring data summarizes or analyzes network flow or performance data?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Statistical data is used to describe and analyze network flow or performance data.
3. What type of network monitoring data includes device-specific server and host logs?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Transaction data includes device-specific server and host logs.
4. What type of network monitoring data includes files that are attached to emails or that were downloaded from the internet?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Extracted content includes files that are attached to emails or that were downloaded from the internet.
5. What type of network monitoring data contains details of network flows including the 5-tuples the amount of data transmitted and the duration of data transmission?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Session data contains details of network flows including the 5-tuples the amount of data transmitted and the duration of data transmission.
6. What type of network monitoring data is generated by IPS or IDS devices when suspicious traffic is detected?
- full-packet capture
- transaction data
- session data
- alert data
- extracted content
- statistical data
Explanation: Alert data is generated by IPS or IDS devices when suspicious traffic is detected.