A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper…

Question

Options

• AAdvisories
• BStrategic reports
• CDetection indicators
• DLow-level data

• A
  9% (2)
• B
  5% (1)
• C
  14% (3)
• D
  73% (16)

Explanation

Low-level data refers to raw, unprocessed information - like log files, packet captures, and event records - that lacks immediate context but becomes valuable after analysis. Log files from a traffic monitoring system are exactly this: voluminous, seemingly mundane data that requires expert interpretation to surface attack indicators.

Why the distractors are wrong:

• A. Advisories are curated notifications from vendors or CERTs warning about specific vulnerabilities or threats - pre-analyzed, not raw.
• B. Strategic reports are high-level intelligence documents for decision-makers about threat actor trends and business risk - far above raw logs.
• C. Detection indicators (IOCs like IPs, hashes, domains) are already-processed artifacts extracted from low-level data - they are the output of analysis, not the raw input.

Memory tip: Think of the threat intelligence pyramid - low-level data sits at the base (high volume, low value alone), while advisories and strategic reports sit higher (low volume, high value). If the question describes raw, unprocessed sources like logs or packet captures that "don't seem useful" without analysis, that's always low-level data.

No community discussion yet for this question.