210-255 · Question #116
Which two potions are the primary 5-tuple components? (Choose two)
The correct answer is A. destination IP address E. source IP address. A network flow 5-tuple is defined by five fields - source IP, destination IP, source port, destination port, and protocol - and both IP address fields are primary components.
Question
Which two potions are the primary 5-tuple components? (Choose two)
Options
- Adestination IP address
- Bheader length
- Csequence number
- Dchecksum
- Esource IP address
How the community answered
(49 responses)- A88% (43)
- B2% (1)
- C8% (4)
- D2% (1)
Why each option
A network flow 5-tuple is defined by five fields - source IP, destination IP, source port, destination port, and protocol - and both IP address fields are primary components.
Destination IP address is one of the five core fields of the 5-tuple, identifying the target endpoint of the network flow and enabling routing and policy decisions.
Header length is a parsing field in the IP or TCP header that indicates offset to data, not one of the five flow-identifying components.
Sequence number is a TCP-specific field used to order segments for reliable delivery and is not part of the 5-tuple flow identifier.
Checksum is an error-detection field present in IP and TCP headers for integrity verification, not a flow classification component of the 5-tuple.
Source IP address is one of the five core fields of the 5-tuple, identifying the originating host and forming the basis for bidirectional flow tracking alongside the destination IP.
Concept tested: Network flow 5-tuple identification components
Source: https://www.iana.org/assignments/ipfix/ipfix.xhtml
Topics
Community Discussion
No community discussion yet for this question.