Chapter 6

1. Arkime is a network traffic capture and analyzer that used to be known as what?
   1. Malcolm
   2. Molotov Cocktail
   3. Moloch

   Answer: C – Moloch.

2. What does it mean when a NIC operates in promiscuous mode?
   1. The NIC captures all traffic passing through it, regardless of the final destination
   2. The NIC is extra friendly with the data that passes through it
   3. The NIC only captures data passing through where the device itself is the final destination

   Answer: A – Promiscuous mode means the NIC captures everything, even traffic not intended for it.

3. What is real-time traffic analysis?
   1. Sitting on an overpass to study the different makes and models of automobiles as they pass by
   2. Analyzing network traffic that is time-stamped in Zulu time on a Gregorian calendar format
   3. The ability to analyze network traffic as it is actively occurring
   4. Examining any traffic that has occurred within the previous 20 minutes

   Answer: C – real-time means live and in stereo – as things are occurring...