MENU
What is obtained using NetFlow?
Suggested Answer: A
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
TCP injection is an attack where the attacker sends crafted packets into an existing TCP session. These packets appear to be part of the session.
The presence of many SYN packets with the same sequence number, source, and destination IP but different payloads indicates that an attacker might be injecting packets into the session.
This method can be used to disrupt communication, inject malicious commands, or manipulate the data being transmitted.
Understanding TCP Injection Attacks
Analyzing Packet Captures for Injection Attacks
Network Security Monitoring Techniques
28 comments · newest first
EL
Elza
11 months ago
I thought it was for network downtime reports, guess I was wrong!
AR
Arlene
11 months ago
Nope, not application logs either.
IZ
Izetta
11 months ago
Wait, it doesn't do full packet capture? That's surprising!
VI
Viki
11 months ago
Totally agree, it's all about flow data!
DO
Domitila
12 months ago
NetFlow provides session data.
LO
Lottie
12 months ago
I feel like full packet capture is more detailed than what NetFlow provides, so I’m leaning towards session data as the answer.
PU
Pura
1 year ago
Application logs seem more related to software behavior, not sure if that's what NetFlow captures.
MA
Malcolm
1 year ago
I remember practicing a question about NetFlow, and I think it was related to monitoring traffic patterns, which sounds like session data too.
AL
Alethea
1 year ago
I think NetFlow is used for session data, but I'm not entirely sure if that's the right term.
LE
Levi
1 year ago
Okay, I've got this. NetFlow is a protocol that collects data about network traffic flows, including things like source and destination IP addresses, ports, and packet counts. The answer has to be session data.
NU
Nu
1 year ago
Hmm, I'm a bit unsure about this one. NetFlow - is that related to network traffic analysis or something? I'll have to think this through carefully.
DU
Dudley
1 year ago
This seems like a straightforward networking question. I think I've learned about NetFlow before, so I'll try to recall what it's used for.
AM
Ammie
1 year ago
I'm confident that NetFlow provides session data, not application logs or a network downtime report. Full packet capture is a different technology, so the answer has to be A.
SH
Sherill
1 year ago
Hmm, this is a tricky one. I know that type NS records are used to find the authoritative name servers for a domain, and type MX records are used to find the mail servers. But I'm not sure which one would be used to resolve the domain name to an IP address. I'll have to review my DNS knowledge before answering this.
LA
Lazaro
1 year ago
I bet the network admin who wrote this question is just laughing at us, thinking 'Wait till they see the real deal!'
CA
Catina
1 year ago
A network downtime report? What is this, a management report? C is just silly. Give me that sweet, sweet session data!
FL
Florinda
1 year ago
Application logs? Really? This is a networking exam, not a system admin one. B is clearly a distraction.
VO
Vonda
1 year ago
D) full packet capture
SA
Sanjuana
1 year ago
C) network downtime report
CA
Carmelina
1 year ago
A) session data
WI
Wilford
1 year ago
Hmm, I was hoping for something more juicy like full packet capture. D seems like the way to go, even if it's a bit overkill.
SH
Shad
1 year ago
User 3: I agree, having full packet capture can be really useful for troubleshooting network issues.
AR
Aracelis
1 year ago
User 2: Yeah, D does seem like overkill but it's always good to have all the data.
HA
Harrison
1 year ago
User 1: D) full packet capture
EL
Elza
1 year ago
NetFlow definitely gives me session data. I can see all the traffic flowing through the network. Easy choice - A!
MA
Malinda
2 years ago
I'm not sure, but I think it could also be D) full packet capture.
YA
Yan
2 years ago
I agree with Bulah, NetFlow is used to obtain session data.
BU
Bulah
2 years ago
I think the answer is A) session data.