200-201 Practice Test

200-201 Practice Test practice questions, page 12 of 19, with answer review and explanations.

Question 56

Refer to the exhibit. Which type of log is displayed?

  1. proxy
  2. NetFlow
  3. IDS
  4. sys

Question 57

How is NetFlow different from traffic mirroring?

  1. NetFlow collects metadata and traffic mirroring clones data.
  2. Traffic mirroring impacts switch performance and NetFlow does not.
  3. Traffic mirroring costs less to operate than NetFlow.
  4. NetFlow generates more data than traffic mirroring.

Question 58

What makes HTTPS traffic difficult to monitor?

  1. SSL interception
  2. packet header size
  3. signature detection time
  4. encryption

Question 59

How does an attacker observe network traffic exchanged between two users?

  1. port scanning
  2. man-in-the-middle
  3. command injection
  4. denial of service

Question 60

Which type of data consists of connection level, application-specific records generated from network traffic?

  1. transaction data
  2. location data
  3. statistical data
  4. alert data