MENU
Bob. a network specialist in an organization, is attempting to identify malicious activities in the network. In this process. Bob analyzed specific data that provided him a summary of a conversation between two network devices, including a source IP and source port, a destination IP and destination port, the duration of the conversation, and the information shared during the conversation.
Which of the following types of network-based evidence was collected by Bob in the above scenario?
Suggested Answer: B
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
LO
Lonny
11 months ago
I agree, session data fits the description perfectly!
RE
Regenia
11 months ago
Wait, is that really all he analyzed? Seems too simple.
NO
Norah
11 months ago
Definitely session data, no doubt about it.
HE
Heike
12 months ago
I think it's alert data, though.
CE
Celestina
12 months ago
Sounds like session data to me!
LI
Lisandra
1 year ago
I’m a bit confused because alert data also seems relevant, but I think the focus on the conversation makes it session data.
ME
Melodie
1 year ago
I feel like I've seen a similar question before, and it was about identifying session data too. That makes sense here.
LO
Lou
1 year ago
This sounds a lot like session data since it involves conversations between devices. I think that's the right choice.
VE
Verdell
1 year ago
I remember studying the different types of network evidence, but I'm not entirely sure which one fits this scenario best.
PA
Pamella
1 year ago
This is a tricky one, but I'm pretty confident that the correct answer is C, session data. The question describes the specific details that Bob collected, which align with the characteristics of session-level network data. I'll mark that as my final answer.
CH
Chau
1 year ago
Okay, I think I've got this. Based on the details provided, Bob collected session data, which includes information about the network connection between the two devices, like the IP addresses, ports, and duration of the conversation. That seems to be the best answer here.
DO
Dominque
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions details like source/destination IP and port, duration, and information shared, so I'm not sure if this is considered "statistical data" or something else. I'll have to think it through carefully.
VE
Verlene
1 year ago
This seems like a straightforward question about network-based evidence. I'll focus on identifying the type of data that Bob collected, which includes information about the network conversation between the two devices.
TA
Tabetha
1 year ago
I'm leaning towards the capabilities of the phone itself and the applications that will be loaded on it. Those are the core technical aspects that need to be thoroughly validated. The personas and vendor relationship are important, but I'd prioritize the core functionality first.
HE
Herman
1 year ago
I'm leaning towards transference as the answer. Since the management team is asking Harry to find a new supplier, they could be transferring the risk to that new supplier to ensure the project stays on track.
FR
Franchesca
1 year ago
Okay, I've got this. The question is asking about corporate issues that are NOT related to ethics or social responsibility. So I need to find the option that doesn't fit into those categories.
ET
Ethan
1 year ago
This question seems straightforward, but I want to make sure I understand the key points about securing the backup plan. I'll need to focus on access control and monitoring for the backup storage location.
VI
Viola
1 year ago
I remember studying about CAD risk factors, but I'm not sure if impaired fasting glucose is considered an emerging risk.
JA
Jamal
1 year ago
Oh, this is a tough one. I'm going to have to go with C) Session data, but I'm secretly hoping Bob has a backup plan in case the network goes haywire. You know, like a secret stash of cat videos or something.
CA
Carissa
1 year ago
C) Session data provides a detailed record of communication between devices.
TA
Tamala
1 year ago
B) Alert data is important for real-time detection of potential threats.
VA
Valda
1 year ago
A) Statistical data could also be useful in identifying malicious activities.
FA
Fairy
1 year ago
I'm going with C) Session data. Anything involving 'Bob the network specialist' has to be session data, right? I mean, the guy probably has a sixth sense for this kind of thing.
AM
Amber
1 year ago
C) Session data
MA
Major
1 year ago
B) Alert data
DA
Daniel
1 year ago
A) Statistical data
BR
Brett
2 years ago
Easy peasy, it's C) Session data. Bob's a network specialist, so he knows his stuff. I bet he could catch a hacker faster than I can finish my morning coffee!
XU
Xuan
2 years ago
I believe it could also be Alert data, as it provides information about specific events that may indicate malicious activities.
PH
Phil
2 years ago
Hmm, I'm torn between C) Session data and D) Full content data. The summary of the conversation makes me think it's the full content, but the other details point to session data.
KA
Kasandra
1 year ago
B) Alert data
DO
Dong
1 year ago
A) Statistical data
ER
Erinn
2 years ago
I think the correct answer is C) Session data. The details provided, like source and destination IPs and ports, duration, and conversation content, are all characteristics of a network session.
DE
Desiree
1 year ago
D) Full content data
AD
Adrianna
1 year ago
C) Session data
EL
Elli
1 year ago
B) Alert data
WI
Willie
2 years ago
A) Statistical data
AU
Audrie
2 years ago
I agree with Rolf. Session data includes the summary of a conversation between network devices.
RO
Rolf
2 years ago
I think the network-based evidence collected by Bob is Session data.