Questions

Here are a few questions to test your understanding of the chapter:

1. NetFlow/IPFIX are protocols that are used for:
   1. Continuous monitoring of packets/bytes/gits per second
   2. Packet analysis and deep packet inspection (DPI)
   3. IP (Layer 3) and TCP/UDP (Layer 4) statistics
   4. All of the above
2. In the Example 1.pcap capture file, you will see STUN packets. What are they used for in this example?
   1. Malware discovered in the end device (user laptop)
   2. A connection to Cisco Webex servers
   3. A connection to a streaming server that is used for video transmission
   4. A video conference application
3. A network traffic baseline includes:
   1. Any information on users and what they send to or receive from networks
   2. IP addresses and TCP/UDP port numbers
   3. IP addresses and TCP/UDP port numbers and conversations
   4. Application types and TCP/IP information
4. A scanning pattern will have the following identifiers (IDs):
   1. A single station that sends packets to the entire network
   2. Many stations that send packets to a single...