Q: 8
Refer to the exhibit.
Refer to the exhibit. An engineer received a ticket to analyze unusual network traffic. What is
occurring?
Refer to the exhibit. An engineer received a ticket to analyze unusual network traffic. What is
occurring?Options
Discussion
I don't think it's B, since data exfiltration usually doesn't cause such a big traffic spike. A.
I think A, since that's what most official practice tests lean toward for traffic spike scenarios. Wouldn't hurt to double check with Cisco's official guide or lab sim if you're unsure though.
Its A, the traffic spike is classic denial-of-service pattern. Data exfiltration would look different. Pretty sure, but exhibit could always mislead.
B . That spike can easily be large data exfiltration, not just a DoS trap. I think A is too obvious.
Option B. I think data exfiltration fits since unusual network traffic could be a sign of sensitive data being sent out, especially if direction isn’t clear on the exhibit. Not entirely sure though, A might just be a trap choice here. Anyone see it differently?
Makes sense to choose A here. The big traffic spike looks a lot more like typical denial-of-service than exfiltration.
Seriously Cisco makes these exhibits way too vague sometimes, but A
I don’t think B fits here, since data exfiltration usually shows smaller, sustained outbound flows. The traffic spike in the exhibit looks more like a flood, classic for a denial-of-service attack (A). Regular traffic (C) is a trap option. Open to other thoughts if I missed something on the graph.
A is the one here. Big traffic spike like that usually means denial-of-service, not exfiltration, since exfil tends to be quieter or sustained over time. Regular traffic wouldn't cause a sudden surge. Not 100% without seeing more details in the exhibit, but A makes sense for the exam.
C/D? If they showed more on direction, I'd be more sure, but C doesn't fit with that big spike either.
Be respectful. No spam.