Cisco Exam 200-201 Topic 3 Question 92 Discussion

Actual exam question for Cisco's 200-201 exam

Question #: 92
Topic #: 3

[All 200-201 Questions]

What is obtained using NetFlow?

Asession data

Bapplication logs

Cnetwork downtime report

Dfull packet capture

Show Suggested Answer

Suggested Answer: A

TCP injection is an attack where the attacker sends crafted packets into an existing TCP session. These packets appear to be part of the session.

The presence of many SYN packets with the same sequence number, source, and destination IP but different payloads indicates that an attacker might be injecting packets into the session.

This method can be used to disrupt communication, inject malicious commands, or manipulate the data being transmitted.

Understanding TCP Injection Attacks

Analyzing Packet Captures for Injection Attacks

Network Security Monitoring Techniques

by Donte at Jul 13, 2024, 07:28 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lazaro

1 months ago

I bet the network admin who wrote this question is just laughing at us, thinking 'Wait till they see the real deal!'

upvoted 0 times

...

Catina

1 months ago

A network downtime report? What is this, a management report? C is just silly. Give me that sweet, sweet session data!

upvoted 0 times

...

Florinda

1 months ago

Application logs? Really? This is a networking exam, not a system admin one. B is clearly a distraction.

upvoted 0 times

Vonda

8 days ago

D) full packet capture

upvoted 0 times

...

Sanjuana

13 days ago

C) network downtime report

upvoted 0 times

...

Carmelina

17 days ago

A) session data

upvoted 0 times

...

3 months ago

I think the answer is A) session data.

upvoted 0 times

...