Network Monitoring

Correct Answer: Intrusion Detection System (IDS)

An Intrusion Detection System (IDS) is designed to monitor network traffic for suspicious activity or policy violations and report these to a management system, making it the best solution for alerting on unauthorized access attempts. It actively identifies possible incidents, logs information, and may attempt to block or stop malicious activity. Simple Network Management Protocol (SNMP) is a protocol for management of devices on an Internet Protocol (IP) network. It's used to organize and manage networks, but it does not monitor unauthorized access. Syslog is a standard for message logging, monitoring and forwarding logs of different devices. It can be used to understand what is happening to a device, but it does not inherently alert on unauthorized access. A Protocol Analyzer can analyze and debug data traffic. While it can be used to investigate a security incident, it doesn't typically generate alerts for unauthorized access. An IDS is more suitable for this requirement.

Correct Answer: Network analyzer

The correct tool to use when identifying the origin of network congestion is a 'Network Analyzer'. A Network Analyzer can monitor and analyze network data, such as packet traffic and usage patterns, to pinpoint the source of latency. It's particularly useful when the congestion occurs consistently at a specific time. The other options are not the best tools for this job. 'Ipconfig' is a command-line tool used on Windows to display the current network configuration, but it does not analyze network latency or congestion. 'ARP' (Address Resolution Protocol) is a protocol used to find the physical address associated with a network layer address, but it is not related to analyzing network congestion. 'Syslog' is a standard for message logging and would not assist with identifying the source of network latency.

Correct Answer: Ping

The tool that should be utilized by a network administrator for monitoring a specific device for network connectivity issues is 'Ping'. 'Ping' is a computer network administration tool that is used to test the reachability of a host on an Internet Protocol (IP) network and to measure the round-trip time for messages sent to the host. It operates by sending Internet Control Message Protocol (ICMP) Echo Request messages to the destination host and awaits an Echo Reply. It gives an immediate feedback about the availability of a specific IP address or host. The other options, while useful for network diagnostic and troubleshooting tasks, are designed for more specific purposes. 'Traceroute' could be used to track the pathway taken by a packet on an IP network from source to destination, but does not continuously monitor for connectivity. 'Sniffer' or packet analyzer, captures each packet to fetch and analyze its content which is more geared towards understanding network details rather than simple reachability. 'Telnet' is a network protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection, but it isn’t mainly used for testing connectivity.