Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer B is correct. According to Cisco's Network Security Monitoring (NSM) principles outlined in the 200-201 CBROPS exam framework, Full Packet Capture (FPC) is the only data source that records both the network headers and the entire data payload.When investigating a data exfiltration incident, you must be able to definitively identify exactly what sensitive information left the network. While other formats can flag a suspicious connection, only an FPC allows you to carve out, rebuild, and view the actual data or file content transferred to verify a breach.
"data exfiltration" points directly to the need for a data type that allows detailed inspection of transferred content, which is why full packet capture is the best answer.
"Provides the investigate capability" . To me it is B)