Bird
0
0

What is wrong with this network forensics approach? "Deleting captured network packets immediately after collection."

medium📝 Analysis Q7 of 15
Cybersecurity - Digital Forensics
What is wrong with this network forensics approach? "Deleting captured network packets immediately after collection."
AImmediate deletion speeds up investigation
BDeleting packets improves security
CPackets are useless after capture
DPackets should be preserved for analysis
Step-by-Step Solution
Solution:

  1. Step 1: Understand packet handling in forensics

    Captured packets must be saved to analyze and investigate incidents properly.

  2. Step 2: Identify the mistake

    Deleting packets immediately prevents analysis and evidence gathering, which is incorrect.

  3. Final Answer:

    Packets should be preserved for analysis -> Option D

  4. Quick Check:

    Preserve packets for investigation [OK]
Quick Trick: Keep packets for analysis; don't delete immediately [OK]
Common Mistakes:
MISTAKES
  • Deleting packets too soon
  • Assuming packets have no value post-capture
  • Believing deletion speeds investigation

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Endpoint Detection and Response (EDR) - Quiz 15hard Compliance and Governance - Security policy development - Quiz 6medium Digital Forensics - Memory forensics basics - Quiz 15hard Digital Forensics - Mobile device forensics - Quiz 3easy Emerging Security Topics - IoT security challenges - Quiz 6medium Emerging Security Topics - Why security evolves with technology - Quiz 11easy Emerging Security Topics - Why security evolves with technology - Quiz 14medium Incident Response - Detection and analysis phase - Quiz 4medium Incident Response - Incident response lifecycle - Quiz 11easy Incident Response - Why incident response plans save organizations - Quiz 13medium