Questions

Now it's time to check your knowledge. Select the best response and then check your answers, which can be found in the Assessments appendix:

1. Packet analysis has been around in some form since the _____ as a diagnostic tool to observe data and other information traveling across the network.
   1. 1950s
   2. 1960s
   3. 1970s
   4. 1990s
2. Packet analysis is used in the real world in many forms. One is the DHS _____system, which monitors for threats.
   1. CARVER
   2. Packet
   3. EINSTEIN
   4. DESTINY3
3. In the expert system, _____ provides information about typical workflows such as TCP window updates or connection finishes.
   1. Note
   2. Chat
   3. Error
   4. Warn
4. A ____ provides a snapshot of network traffic during a window of time using Wireshark or tshark. Characteristics can include utilization, network protocols, and effective throughput forwarding rates.
   1. Round Robin
   2. DORA process
   3. Baseline
   4. WinCheck
5. Monitoring for threats occurs in one of three ways. _____ is when a system has fallen victim to an attack and the incident response team manages the attack, followed by a forensic exercise.
   1. Proactive
   2. Reactive
   3. Active
   4. Redactive
6. When testing _____ using Wireshark, you will be able to determine how they communicate once active and see whether they phone home without being prompted.
   1. ACLs
   2. Expert systems
   3. IoT devices
   4. IDSes
7. When obtaining an IP address, DHCP will go through a four-part transaction called the _____.
   1. Round Robin
   2. DORA process
   3. Baseline
   4. WinCheck