Exam 200-201 topic 1 question 43 discussion

Shouldn't the answer be session data? Session data provides information about the five tuples; source IP address/port number, destination IP address/port number and the protocol

Session Data is the right answer.

5 tuple session data. A is correct

The correct answer is B. session data. To obtain information about source/destination ports, you need to analyze session data. Session data refers to the information associated with a network session or connection between two devices. This data typically includes details such as source IP address, destination IP address, source port, destination port, protocol used, and other relevant information. By examining session data, you can identify the specific ports being used by the source and destination devices. This information is crucial for network administrators and security professionals to understand network traffic patterns, identify potential vulnerabilities, and investigate network-related issues.

B. To get information about source/destination ports, you need session data. Session data typically includes information about the network connections established between different devices or systems, including the source and destination IP addresses, as well as the corresponding source and destination ports. Connectivity data generally refers to information about the availability and status of network connections. It may include details like whether a connection is active or inactive, but it may not specifically focus on source/destination ports.

Session data typically includes information about the communication session between two devices, including the source and destination IP addresses and port numbers. Port numbers are an important part of network communication because they allow different services to use the same IP address while still maintaining unique communication channels. By analyzing session data, network administrators can gain insight into the types of traffic on their network and identify potential security risks or performance issues. C. Alert data is generated by security tools and indicates the detection of a specific event, such as an attempted intrusion or malware infection. While alerts can provide valuable information about security incidents, they do not necessarily include details about the ports used in the attack. D. Connectivity data may include information about the availability or performance of network connections, but it typically does not include detailed information about the ports used for communication.

I believe "Connectivity Data" or "Connection Data" is correct. Knowing Cisco, the most simplest and sensible answer is always correct. Let’s define “Flow” first. It is a unidirectional sequence of packets between two network endpoints that have the following 7 things in common: 1. Source IP Address 2. Destination IP Address 3. L3 Protocol Type 4. Source Port 5. Destination Port 6. Type of Service 7. Input Interface Connection - It is a bidirectional flow. Session - Many Connections between the same source and destination. Socket - Single unidirectional flow Connection Data already have source/destination ports present. Session is just multiple flows, the simplest one would be Connection Data. https://community.cisco.com/t5/application-networking/difference-between-session-connections-socket/td-p/2417074 https://community.cisco.com/t5/network-security/difference-between-session-and-connection/td-p/1846129

Session data is correct

B. "Session data".

Got to be the TCP Session data surely?

SESSION DATA

session data

i think its session

Session data is required

There is no connectivity data in the course, only session data is right here. Answer is B.

The Transport and Session layers keep track of all new connections, established connections and connections that are in the process of being torn down, which explains how Host A remembers that it's expecting a reply from the Internet Server. Answer is "B" Session Data.

c is correct its seesion