Deep Packet Inspection focuses on which aspect of network traffic?

• A. Examines the metadata of packets without content
• B. A method to reassemble streams for analysis
• C. Examines the content of data packets as they pass by the checkpoint on the network
• D. A compression technique for network packets

Answer: (C)

Deep Packet Inspection centers on inspecting the actual data payload of packets as they traverse a network checkpoint. It goes beyond headers to analyze the content carried in each packet, enabling detection of the applications in use, enforcement of content policies, and identification of malicious or sensitive data. Sometimes DPI may reassemble multiple packets to reconstruct a full message so the content can be analyzed accurately, but the main focus is the payload itself rather than just the metadata. The other options describe related ideas that aren’t the primary focus: looking only at metadata, treating stream reassembly as the main feature, or a compression technique, which DPI does not aim to do.