Which of the following are true regarding full packet capture?

Posted by: Pdfprep Category: 210-250 Tags: , ,

Which of the following are true regarding full packet capture?
A . Full packet capture demands great system resources and engineering efforts, not only to collect the data and store it, but also to be able to analyze it. That is why, in many cases, it is better to obtain network metadata by using NetFlow.
B . Full packet captures can be discarded within seconds of being collected because they are not needed for forensic activities.
C . NetFlow and full packet captures serve the same purpose.
D . Most sniffers do not support collecting broadcast and multicast traffic.

Answer: A

Leave a Reply

Your email address will not be published.