What is an example of the use of a flow data that provides more information than an event data?
A . Represents a single event on the network
B . Automatically identifies and better classifies new assets found on a network
C . Performs near real-time comparisons of application data with logs sent from security devices
D . Represents network activity by normalizing IP addresses ports, byte and packet counts, as well as other details
Answer: D
Explanation:
Reference: http://www-01.ibm.com/support/docview.wss?uid=swg21682445