NetFlow provides information that helps security teams analyze traffic patterns. Which description best captures NetFlow's purpose?

NetFlow provides information that helps security teams analyze traffic patterns. Which description best captures NetFlow's purpose?

• A. It analyzes DNS records
• B. It encrypts web traffic
• C. It collects traffic data to analyze flow across the network
• D. It stores email metadata

Answer: (C)

NetFlow centers on collecting data about how traffic moves through the network. It captures flow-level metadata—who talks to whom, which ports and protocols are used, how much data is exchanged, and when a flow starts and ends—so security teams can see patterns of activity across the network. This visibility allows detection of unusual or heavy traffic, relationships between devices, and potential security incidents, without needing to inspect the actual content of the traffic. This fits best because NetFlow is about analyzing traffic flows and patterns, not about inspecting DNS records, encrypting web traffic, or storing email metadata. The other options describe separate functions (DNS analysis, encryption, or email metadata management) that NetFlow does not perform.

NetFlow centers on collecting data about how traffic moves through the network. It captures flow-level metadata—who talks to whom, which ports and protocols are used, how much data is exchanged, and when a flow starts and ends—so security teams can see patterns of activity across the network. This visibility allows detection of unusual or heavy traffic, relationships between devices, and potential security incidents, without needing to inspect the actual content of the traffic.

This fits best because NetFlow is about analyzing traffic flows and patterns, not about inspecting DNS records, encrypting web traffic, or storing email metadata. The other options describe separate functions (DNS analysis, encryption, or email metadata management) that NetFlow does not perform.