312-39V2: Certified SOC Analyst v2

A government agency that protects sensitive information must monitor its network for unusual data-exfiltration attempts. Because traditional log data by itself cannot identify suspicious traffic patterns, the SIEM team decides to integrate traffic-flow data into its system. This data will help identify anomalies, including large data transfers to unauthorized destinations or unexpected traffic spikes. The team must select the appropriate protocol for collecting IP traffic information from network devices such as routers and switches. Which protocol should be used to collect this data?