Cybersecurity and Response Planningintermediate
Match each traffic-analysis or correlation capability to its main use.
Answer
Full-packet capture - Records complete packets for detailed traffic analysis.; NetFlow - Captures traffic origin, destination, and amount.; Stream headers - Include a header and a portion of packet contents.; SIEM - Ingests and correlates logs and data from diverse sources.
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| Full-packet capture | Records complete packets for detailed traffic analysis. | Capturing full packets preserves detailed traffic evidence, though it can be costly. |
| NetFlow | Captures traffic origin, destination, and amount. | NetFlow describes traffic flows without being the same as full-packet content capture. |
| Stream headers | Include a header and a portion of packet contents. | This option captures more than a header alone but less than full packets. |
| SIEM | Ingests and correlates logs and data from diverse sources. | A SIEM brings records together to identify relationships and patterns. |
### Terms
- **Stream header**: A captured header plus a portion of packet contents.
- **Security Information and Event Management (SIEM)**: A system for ingesting and correlating security data.
### Remember
Full packets, flow summaries, and SIEM correlation provide different kinds of evidence.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free