GSEC · Question #300
What is achieved with the development of a communication flow baseline?
The correct answer is D. Identification of existing IT assets. A communication flow baseline documents which systems talk to which, on what ports and protocols, effectively mapping all active IT assets and their relationships on the network.
Question
What is achieved with the development of a communication flow baseline?
Options
- AValidation of data access
- BClassification of critical data
- CCategorization of internal risks
- DIdentification of existing IT assets
How the community answered
(39 responses)- A13% (5)
- B3% (1)
- C8% (3)
- D77% (30)
Why each option
A communication flow baseline documents which systems talk to which, on what ports and protocols, effectively mapping all active IT assets and their relationships on the network.
Validation of data access is an authorization and access-control review process, not an outcome of mapping network communication flows.
Classification of critical data is a data governance activity that categorizes data by sensitivity level and is independent of network flow analysis.
Categorization of internal risks is a risk management process that evaluates threat likelihood and impact, which is distinct from baselining communication patterns.
Building a communication flow baseline requires capturing all network traffic patterns between hosts, services, and endpoints in the environment. This process inherently reveals every device and system participating in communications, producing a comprehensive inventory of existing IT assets. Without knowing what assets are present, it is impossible to establish what 'normal' communication looks like.
Concept tested: Network communication flow baseline for asset identification
Source: https://www.nist.gov/publications/guide-cyber-threat-information-sharing
Topics
Community Discussion
No community discussion yet for this question.