Free CompTIA Security+ SY0-601 Practice Question

During an investigation of unusual traffic on a company's network, an Incident Response team decides to utilize a specific protocol that samples network packets and sends the data to a collector for analysis. The protocol is designed to be scalable for high-speed networks. Which traffic monitoring protocol would be most appropriate for this situation?

  • Tcpdump

  • SNMP

  • RMON

  • sFlow

This question's topic:
CompTIA Security+ SY0-601 / 
Operations and Incident Response
Your Score:

Check or uncheck an objective to set which questions you will receive.