Exam 200-201 topic 1 question 142 discussion

Netflow=Session data for sure! My answer Netflow-->TCPdump-->Web content filter-->Stateful F/W

tcpdump -- full packet capture web content filtering -- transaction data sateful firewall - connection event Netflow -- session data

Netflow tcpdump web content filtering stateful firewall

tcpdump: full packet capture - tcpdump is a tool for capturing and analyzing packets, allowing for detailed analysis of network traffic. web content filtering: transaction data - web content filtering is a technology that inspects and filters web traffic, looking for specific types of content or behavior. traditional stateful firewall: connection event - a stateful firewall monitors connections between devices and tracks their state, allowing it to make informed decisions about whether to allow or block traffic. Netflow: session data - Netflow is a protocol used to collect and analyze network traffic data, providing information about the volume and flow of traffic in a given network.

It is easier to store large amounts of NetFlow data because it is only a transactional record.

Netflow tcpdump web content filtering stateful firewall

Wrong answer. Corect is as VegasBF writes. But in Question #158 they put correct answer :)

it should NTWS and it would like this for sure!

I agree with VegasBF

It is easier to store large amounts of NetFlow data because it is only a transactional record.

Netflow is session data, not transaction data..