Isaca
CISM · Question #844
Which of the following would be MOST helpful if more detail is needed on network activity during a suspected incident?
The correct answer is A. Packet sniffer. A packet sniffer captures and analyzes network packets, providing the most detailed visibility into actual network activity (communications, protocols, payload patterns) during a suspected
Submitted by luis.pe· Apr 18, 2026Information Security Incident Management
Question
Which of the following would be MOST helpful if more detail is needed on network activity during a suspected incident?
Options
- APacket sniffer
- BAccess log reviews
- CNetwork time protocol
- DForensic investigation
How the community answered
(49 responses)- A71% (35)
- B4% (2)
- C10% (5)
- D14% (7)
Explanation
A packet sniffer captures and analyzes network packets, providing the most detailed visibility into actual network activity (communications, protocols, payload patterns) during a suspected
Topics
#Packet Sniffing#Network Monitoring#Incident Response Tools#Network Forensics
Community Discussion
No community discussion yet for this question.