Exam 210-250 topic 1 question 9 discussion

Neither response seems correct based on course slides: * Alert Data consists of messages generated by IPSs or IDSs in response to traffic that violates a rule or matches the signature of a known exploit. * Transaction data consists of the messages that are exchanged during network sessions. Can be viewed in packet capture transcripts.  * Session Data is a record of a conversation between two network endpoints. Includes a session ID, the amount of data transferred by source and destination, and information related to the duration of the session. Bro is a network security monitoring tool. * Statistical Data is about network traffic. Created through the analysis of other forms of network data. Allow conclusions to be made that describe or predict network behavior. Normal network behavior can be compared to current traffic to detect anomalies.