nerdexam
CompTIA

SY0-301 · Question #342

Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all traffic on her network?

The correct answer is C. Protocol analyzer. A protocol analyzer captures and decodes all network packets, making it the best tool for quantifying every type of traffic on a network.

Security operations

Question

Which of the following tools would allow Ann, the security administrator, to be able to BEST quantify all traffic on her network?

Options

  • AHoneypot
  • BPort scanner
  • CProtocol analyzer
  • DVulnerability scanner

How the community answered

(63 responses)
  • A
    6% (4)
  • B
    2% (1)
  • C
    89% (56)
  • D
    3% (2)

Why each option

A protocol analyzer captures and decodes all network packets, making it the best tool for quantifying every type of traffic on a network.

AHoneypot

A honeypot is a decoy system designed to attract and observe attackers, not a tool for capturing or quantifying all legitimate network traffic.

BPort scanner

A port scanner identifies open ports and services on hosts but does not capture or measure actual network traffic flows.

CProtocol analyzerCorrect

A protocol analyzer (also called a packet sniffer or network analyzer) captures all network traffic in real time and provides detailed breakdowns of protocols, endpoints, and traffic volumes. This gives a security administrator the most comprehensive and quantifiable view of all communications traversing the network. No other listed tool provides this level of full-traffic visibility.

DVulnerability scanner

A vulnerability scanner probes systems for known security weaknesses but does not monitor or quantify real-time network traffic.

Concept tested: Network traffic quantification using protocol analyzers

Source: https://csrc.nist.gov/publications/detail/sp/800-115/final

Topics

#protocol analyzer#network traffic analysis#network monitoring#security tools

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice