SEC+ Mod 5 Part 4

What is NetFlow primarily used for?

• Collecting and monitoring network traffic data

• Encrypting network communications

• Managing user access controls

• Developing network hardware

Answer explanation

NetFlow is primarily used for collecting and monitoring network traffic data, allowing for analysis and optimization of network performance.

Which company developed NetFlow?

• Microsoft

• Cisco

• IBM

• Google

Answer explanation

Cisco developed NetFlow.

What type of data does NetFlow NOT record and capture?

• Source and destination IP addresses

• Source and destination port numbers

• The content of every packet

• The number of bytes and packets transmitted

Answer explanation

NetFlow does NOT record and capture the content of every packet, only metadata like source/destination IP addresses, port numbers, and transmitted bytes/packets.

Which of the following is NOT a metric that NetFlow can capture?

• Traffic volume

• Source and destination IP addresses

• User login credentials

• Protocol types

Answer explanation

User login credentials is NOT a metric that NetFlow can capture. NetFlow can capture traffic volume, source and destination IP addresses, and protocol types.

What is the purpose of Flow analyzers in the context of NetFlow?

• Encrypting data packets

• Interpreting and visualizing flow data

• Managing user permissions

• Developing network protocols

Answer explanation

Flow analyzers in the context of NetFlow are used for interpreting and visualizing flow data, not for encrypting data packets, managing user permissions, or developing network protocols.

Which of the following is a similar flow monitoring technology to NetFlow?

• IPFIX

• DNS

• HTTP

• FTP

Answer explanation

IPFIX is a similar flow monitoring technology to NetFlow, making it the correct choice among the options provided.

What does SNMP stand for?

• Simple Network Management Protocol

• Secure Network Management Protocol

• Simple Network Monitoring Protocol

• Secure Network Monitoring Protocol

Answer explanation

SNMP stands for Simple Network Management Protocol, which is used for managing devices on IP networks.

Which component of SNMP is used to authenticate and control access to devices?

• SNMP traps

• SNMP protocol

• Community strings

• Managed devices

Answer explanation

Community strings are used to authenticate and control access to devices in SNMP.

What is the role of SNMP agents?

• They are software modules that run on managed devices and collect information about the device's status and configuration.

• They are used to authenticate and control access to devices.

• They are network devices being monitored and managed using SNMP agents.

• They are a central repository for SNMP information.

Answer explanation

They are software modules that run on managed devices and collect information about the device's status and configuration.

What is an SNMP Collector/Manager?

• A computer or software application used by network administrators to monitor and manage network devices.

• A network device being monitored and managed using SNMP agents.

• A software module that runs on managed devices.

• A notification message sent from a managed device.

Answer explanation

A computer or software application used by network administrators to monitor and manage network devices.