Cisco
210-255 · Question #188
210-255 Question #188: Real Exam Question with Answer & Explanation
The correct answer is D: OS fingerprint. Network profiling uses OS fingerprinting and listening port enumeration to build a baseline understanding of what devices and services exist on a network.
Security Monitoring
Question
Which two elements are used for profiling a network? (Choose two.)
Options
- Atotal throughout
- Bsession duration
- Crunning processes
- DOS fingerprint
- Elistening ports
Explanation
Network profiling uses OS fingerprinting and listening port enumeration to build a baseline understanding of what devices and services exist on a network.
Common mistakes.
- A. Total throughput is a performance and capacity metric used for traffic baselining and bandwidth analysis, not for identifying and profiling the devices and services on a network.
- B. Session duration is a traffic-flow characteristic used in behavioral analysis and anomaly detection, not a primary element used to profile the composition of a network.
- C. Running processes are a host-level profiling element captured via endpoint agents or system access, not a network-level profiling attribute gathered through network observation.
Concept tested. Network profiling using OS fingerprint and listening ports
Topics
#network profiling#OS fingerprinting#listening ports#network baseline
Community Discussion
No community discussion yet for this question.