Q45Security Concepts
Which data type comprises connection-level, application-specific records produced from network traffic?
← → navigate · a answer
Community votes
Discussion · 4
2
a is right
A 2
Selected Answer: A
Transaction data, also called session data, is information produced by network connections between devices and servers, such as IP addresses, ports, protocols, and other metadata. It also includes details about the specific applications or services being used, such as URLs, HTTP headers, and other application-specific data.
A 1
Selected Answer: A
A is right
Transactional Data:
It is the actual data exchanged during a session.
This type of data can be captured with a protocol analyzer such as TCP Dump or Wireshark.
Application-specific records created from network traffic. Logs deeper connection-level information, which may span multiple packets within a connection.
Must have predefined templates for protocol formatting. Common for logging HTTP header/request information, SMTP command data, etc.
https://vwannabe.com/2017/02/07/ccna-cyber-ops-5-0-security-monitoring/#:~:text=Security%20Monitoring)%20data.-,5.2.,multiple%20packets%20within%20a%20connection.
https://www.linkedin.com/learning/cisco-certified-cyberops-associate-200-201-cert-prep-2-security-monitoring/visualizing-session-and-transactional-data
1
Transaction is also the only option that really makes sense