CompTIA Network+ (N10-008) — Question 518

A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10GB connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

Answer options

• A. Port mirroring
• B. Log aggregation
• C. Flow data
• D. Packet capture

Correct answer: C

Explanation

Using flow data is the most effective approach here, as it allows for the analysis of traffic patterns and identifies which flows are consuming the most bandwidth, even with a lower capacity connection. Port mirroring and packet capture may not be as effective due to the server's limited connection speed, and log aggregation typically does not provide real-time insights on bandwidth usage.