Question 390
A network team addresses this situation: Investigators need to identify which hosts generated most outbound traffic, not read packet payload contents. After the corrective action, which test or result BEST verifies that the problem is resolved?
Explanation
Correct Answer
Correlate sampled flow totals with interface byte changes.
Incorrect Answers
Compare reported octets to independent device counter values. That check cannot demonstrate correlate sampled flow totals with interface byte changes.
TCP connections require an accepted SYN, SYN-ACK and ACK exchange before application requests. That check cannot demonstrate correlate sampled flow totals with interface byte changes.
Make a controlled test change and confirm drift alert and reversal. That check cannot demonstrate correlate sampled flow totals with interface byte changes.






CompTIA Network+ (N10-009) Practice Tests