Compare full-packet capture and NetFlow as sources for network traffic analysis.
Answer
Full-packet capture retains detailed packet contents and can provide rich evidence, but it costs more to store and maintain. NetFlow summarizes traffic origin, destination, and amount, so it is less storage-intensive but does not retain the same packet contents.
Explanation
### What a good answer covers
- Full-packet capture preserves detailed network traffic evidence.
- Its storage and maintenance costs can be substantial, so deployment should be strategic.
- NetFlow summarizes communication endpoints and traffic amount.
- The choice depends on the needed detail and available storage capacity.
### Remember
Use packet capture for content detail and NetFlow for lower-volume flow summaries.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free