Which advanced classification tool can be used to classify data applications?
- PDLM
- ToS
- NBAR
- DSCP
Explanation: NBAR (Network-Based Application Recognition) is a sophisticated classification tool that operates from Layer 4 to Layer 7 of the OSI model, providing far more granular visibility than traditional methods. Unlike basic classifiers that rely on static IP addresses or well-known port numbers, NBAR utilizes deep packet inspection to look inside the packet payload and identify application layer protocols. It achieves this by matching traffic against a Packet Description Language Module (PDLM), which acts as a database of application signatures, making it particularly effective for identifying peer-to-peer applications or protocols that negotiate ports dynamically. The most recent version, NBAR2, further expands these capabilities by recognizing a vast array of protocols, including those that do not use standard TCP or UDP ports. By accurately identifying specific data applications, NBAR allows administrators to implement precise QoS policies, such as marking or policing, ensuring that mission-critical applications receive the necessary network resources while managing lower-priority traffic.
Related exam: Modules 1 – 7: Checkpoint Exam: Network Switching Answers (CCNP ENCOR v9)
