3.1 Which of the following is true about tcpdump and Wireshark?

wireshark is a gui built on tcpdump functionality

NetFlow specifically captures:

IP traffic flow without individual packet payload

A flow consists of all packets transmitted until:

the TCP conversation terminates

How are packets not grouped by

same source/destination mac address

Select the most accurate statement about NetFlow

NetFlow is a service designed for advanced packet captures

What does the AVC system use to discover and classify the applications in use on the network? (according to netacad.com)

Cisco's next-generation Network Based Application Recognition version 2

What does the AVC system stand for?

Application Visibility and Control

studbud

25.3 Cybersecurity

19 termsStudBud Administration8 plays

Imported from external platform

Flashcards19 cardsFPractice quizPHost liveL

Questions 19

Answers

1
3.1 Which of the following is true about tcpdump and Wireshark?
wireshark is a gui built on tcpdump functionality
wireshark is a fully independent tool unrelated to tcpdump functionalities
tcpdump is a gui built on wireshark functionality
wireshark uses tcpdump as its graphical front end
2
What does NetFlow not do?
network authentication
network monitoring and security
Denial-of-Service monitoring
network traffic accounting
3
ESA and WSA provide a wide range of functionalities for security monitoring
False
True
4
NetFlow specifically captures:
All packet headers and payload data
IP traffic flow without individual packet payload
Full packet content from start to finish
Individual packet timing and complete payload data for forensic analysis
5
A flow consists of all packets transmitted until:
the UDP conversation terminates
the TCP conversation terminates
the TCP conversation has timed out
all of the above
6
How are packets not grouped by
same source/destination IP address
source/destination ports
same source/destination mac address
all of the above
7
Select the most accurate statement about NetFlow
NetFlow is officially defined as a standard for packet filtering
NetFlow is primarily a network security software tool
NetFlow refers to a protocol for monitoring IP network traffic
NetFlow is a service designed for advanced packet captures
8
How much IP packet attributes flowing in a single direction, is IP flow based on? (based on netacad.com)
4 to 5
5 to 7
8 to 9
1 to 3
9
What does the AVC system use to discover and classify the applications in use on the network? (according to netacad.com)
Cisco's Network Based Anomaly Detection and Reporting version 2
Cisco's next-generation Network Based Application Recognition version 2
Cisco's Network Behavior Analysis and Recognition version 2
Cisco's Network Based Application Recognition version 2
10
What does the AVC system stand for?
Automatic Visibility and Control
Application Visibility and Control
Advanced Virtual Configuration
Application Version Control
11
What tool views NetFlow information?
nftdump
nfidump
nfdump
nfcadump
12
What is the NBAR2?
application recognition software
application recognition engine
application recognition service
application recognition program
13
What does WSA stand for?
web security authentication
web security appliance
web security application
Web Security Analyzer
14
What does ESA stand for?
external security authorization
encrypted security authentication
essential security application
email security appliance
15
3.1 What is a very popular command line packet analyzer?
udpdump command line tool
tcpdump command line tool
ipconfig command line tool
wireshark command line tool
16
What are other logs that are available to the WSA?
all of the above
web reputation filtering
ACL decision logs
malware scan logs
17
What provides very little granularity and visibility into user behavior
identification by port
identification by behavior analysis
identification by signature
identification by client/server
18
How are logs stored (ESA)
text files
SCP servers
syslog servers
all of the above
19
What does a WSA do?
logs all transaction information
submit logs to a server
acts as a web proxy
all of the above

25.3 Cybersecurity Flashcards | StudBud