16) Network Monitoring

A set of vocabulary flashcards derived from the CompTIA Network+ N10-009 course notes focusing on SNMP versions, network monitoring techniques, log management, and network discovery.

Simple Network Management Protocol (SNMP)

A widely used protocol at the application layer of the OSI model used for network management, allowing administrators to monitor, configure, and control network devices.

SNMP Traps

Unsolicited messages sent from an SNMP-enabled device to a management station to notify it of significant events or conditions.

Management Information Bases (MIBs)

Data objects containing information about network devices, such as their status, capacity, and performance.

SNMP v2c

An extension of the original SNMP protocol that offers enhancements like bulk retrieval capabilities but relies on plain text community strings for authentication.

SNMP v3

The most secure version of SNMP, which supports strong authentication and encryption and improves the security of network management operations.

Public Community String

A community string in SNMP that mainly provides read-only access to a device’s information.

Private Community String

A community string in SNMP that generally provides read-write access to a device’s information.

Flow Data

Metadata about network traffic, such as source and destination IP addresses, port numbers, and protocol types, used to understand traffic patterns and bandwidth usage.

Packet Capture (pcap)

The process of intercepting and logging traffic that passes over a digital network to diagnose performance issues and detect malicious activities.

Baseline Metrics

A standard level of normal network performance that includes typical traffic volume, performance speeds, and error rates.

Anomaly Alerting/Notification

Systems designed to automatically detect and report deviations from baseline metrics, signaling potential performance or security issues.

Log Aggregation

The process of collecting, consolidating, and analyzing computer-generated log messages from various sources across the network for centralized management.

Security Information and Event Management (SIEM)

Technology that provides real-time analysis of security alerts by aggregating and correlating log data from hardware and applications.

Syslog Collector

A dedicated tool used for gathering and centralizing syslog messages from multiple sources within a network to simplify troubleshooting and management.

API Integration

The use of Application Programming Interfaces to allow seamless integration between software systems, facilitating automated configurations and data extraction.

Network Solutions

Tools and techniques used to manage, monitor, and secure network infrastructure to ensure optimal performance and reliability.

Network Discovery

The process of identifying devices, servers, and other hardware components connected to a network.

Ad hoc network discovery

A manual network discovery process performed on an as-needed basis to provide immediate visibility into the network.

Scheduled network discovery

An automated network discovery process that occurs at regular intervals to maintain up-to-date network mapping.

Traffic Analysis

The examination of data packets flowing through the network to identify usage patterns, bandwidth consumption, and potential bottlenecks.

Performance monitoring

The tracking of metrics such as response times, throughput rates, and error rates to evaluate the health and efficiency of the network.

Availability monitoring

The process of ensuring critical network components are operational and accessible, detecting downtime and failures to minimize service disruptions.

Configuration monitoring

Tracking changes to network device configurations to prevent unauthorized modifications and ensure compliance with security policies.