Network Traffic Analysis is primarily concerned with?

• A. Randomly sampling packets to estimate throughput
• B. Monitors the data flows on a network to identify patterns or anomalies
• C. Encrypts traffic to protect confidentiality
• D. Caches frequently accessed network files

Answer: (B)

Network traffic analysis is about watching the flows of data across a network to understand how information is moving, who is talking to whom, and how usage or behavior changes over time. It uses flow data, timing, volume, and patterns to spot normal versus abnormal activity, helping with performance monitoring, capacity planning, and security detections. The goal is to identify trends and anomalies in traffic, not to inspect every packet’s content or to encrypt or speed up delivery.

This is the best fit because it directly describes monitoring data flows to uncover patterns and unusual activity, which is the essence of traffic analysis. It goes beyond simply sampling packets to estimate throughput, which focuses on a single metric rather than ongoing flow behavior. Encrypting traffic protects confidentiality, not analysis of traffic movements. Caching network files improves performance, which is unrelated to analyzing traffic patterns or detecting anomalies.