Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 96

What is the difference between the ACK flag and the RST flag in the NetFlow log session?

Answer options

• A. The RST flag confirms the beginning of the TCP connection, and the ACK flag responds when the data for the payload is complete
• B. The ACK flag confirms the beginning of the TCP connection, and the RST flag responds when the data for the payload is complete
• C. The RST flag confirms the receipt of the prior segment, and the ACK flag allows for the spontaneous termination of a connection
• D. The ACK flag confirms the receipt of the prior segment, and the RST flag allows for the spontaneous termination of a connection

Correct answer: D

Explanation

The correct answer is D because the ACK flag is used to confirm the receipt of data segments in a TCP session, while the RST flag is utilized to forcibly terminate a connection. Options A and B incorrectly describe the roles of the flags, and option C misrepresents the functions by suggesting that the RST flag is for receipt confirmation instead of connection termination.