SY0-301 · Question #342
Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all traffic on her network?
The correct answer is C. Protocol analyzer. A protocol analyzer captures and decodes all network packets, making it the best tool for quantifying every type of traffic on a network.
Question
Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all traffic on her network?
Options
- AHoneypot
- BPort scanner
- CProtocol analyzer
- DVulnerability scanner
How the community answered
(63 responses)- A6% (4)
- B2% (1)
- C89% (56)
- D3% (2)
Why each option
A protocol analyzer captures and decodes all network packets, making it the best tool for quantifying every type of traffic on a network.
A honeypot is a decoy system designed to attract and observe attackers, not a tool for capturing or quantifying all legitimate network traffic.
A port scanner identifies open ports and services on hosts but does not capture or measure actual network traffic flows.
A protocol analyzer (also called a packet sniffer or network analyzer) captures all network traffic in real time and provides detailed breakdowns of protocols, endpoints, and traffic volumes. This gives a security administrator the most comprehensive and quantifiable view of all communications traversing the network. No other listed tool provides this level of full-traffic visibility.
A vulnerability scanner probes systems for known security weaknesses but does not monitor or quantify real-time network traffic.
Concept tested: Network traffic quantification using protocol analyzers
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.