Application: Conduct a Network Traffic Analysis
Network traffic analysis is an essential skill. By employing full-packet-capture systems, organizations record every packet of data entering and exiting their borders. Captured data is critical when investigating security incidents and answering key questions, such as what happened, how it happened, and when it happened. Occasionally, the data also answers who did it. As for answering why, unless it is self-evident (e.g., credit card numbers were stolen), IT personnel can only speculate.
Besides investigations, network traffic analysis also is useful for establishing a baseline pattern for network activity. When traffic deviates from the baseline significantly, something is usually wrong. Although the cause could be any number of hardware or software problems, the system also could have been compromised.
In this lab, you will play the role of an IT professional and conduct a network traffic analysis.
For this Assignment, complete Lab 7 (Deliverables 1–2: 1- to a 3-page text file) and write a 2- to 3-page memo that answers Lab Assessment Questions and Answers numbers 3, 7, 8, and 9.
By Day 7, submit a zip file containing your memo and lab manual Deliverables 1–2.