nerdexam
Cisco

210-255 · Question #29

Which two components are included in a 5-tuple? (Choose two.)

The correct answer is A. port number B. destination IP address. A 5-tuple uniquely identifies a network flow using five fields: source IP, destination IP, source port, destination port, and protocol.

Network Intrusion Analysis

Question

Which two components are included in a 5-tuple? (Choose two.)

Options

  • Aport number
  • Bdestination IP address
  • Cdata packet
  • Duser name
  • Ehost logs

How the community answered

(51 responses)
  • A
    88% (45)
  • C
    2% (1)
  • D
    2% (1)
  • E
    8% (4)

Why each option

A 5-tuple uniquely identifies a network flow using five fields: source IP, destination IP, source port, destination port, and protocol.

Aport numberCorrect

Port number (both source and destination ports) is one of the five defining fields of a 5-tuple, used alongside IP addresses and protocol to uniquely identify a network connection or session.

Bdestination IP addressCorrect

Destination IP address is one of the five fields in a 5-tuple, pairing with source IP, source port, destination port, and protocol to fully describe a unique network flow.

Cdata packet

A data packet is the unit of network transmission itself, not a classification field used within the 5-tuple definition.

Duser name

User name is an application-layer identity attribute and is not part of the network-layer 5-tuple structure.

Ehost logs

Host logs are an audit and monitoring artifact and play no role in defining or classifying a 5-tuple network flow.

Concept tested: 5-tuple network flow identification components

Source: https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview

Topics

#5-tuple#port number#destination IP#network traffic

Community Discussion

No community discussion yet for this question.

Full 210-255 Practice