Courseiva
hardMultiple ChoiceObjective-mapped

200-201 Practice Question: Which type of traffic is most prominent in this…

Exhibit

Refer to the exhibit.
SrcAddr       DstAddr       SrcPort  DstPort  Proto  Packets  Bytes
10.0.0.1      10.0.0.2      12345    80       TCP    100      5000
10.0.0.1      10.0.0.3      54321    22       TCP    50       3000

Which type of traffic is most prominent in this NetFlow data?

⚠ Common exam trap

Cisco often tests the ability to distinguish between HTTP and HTTPS by port number, and the trap here is that candidates might assume HTTPS is more common due to modern encryption trends, but the NetFlow data explicitly shows higher traffic on port 80.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

HTTP

HTTP traffic is most prominent because the NetFlow data shows a high volume of packets and bytes on TCP port 80, which is the default port for HTTP. NetFlow records summarize traffic flows, and the large number of flows and bytes on port 80 indicates that HTTP is the dominant protocol in the captured data.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • SSH

    Why it's wrong here

    Port 22 is SSH, but has less traffic than port 80.

  • HTTP

    Why this is correct

    Port 80 is HTTP and has the most packets and bytes.

  • DNS

    Why it's wrong here

    No DNS port (53) is shown.

  • HTTPS

    Why it's wrong here

    No port 443 is shown.

About these practice questions

Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.