Quiz
Protocol Analysis: Quiz 2
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (16)
1What is data segregated by when under the TCP tab of the Endpoint statistics in wireshark?
- AIP, TCP, port
- BIP, UDP, port
- CIP, port
- DMAC, port
2What allows Wireshark to decode a protocol into various fields so the protocol can be displayed in the user interface?
- ADisplay filters
- BProtocol Hierarchy
- CProtocol dissections
- DEndpoints
3Which of the following is required to view the contents in plaintext of an SSL stream to which you control the server?
- APublic Key
- BUse Editcap to decrypt SSL streams
- CNothing Wireshark can decrypt SSL
- DPrivate Key
4The format for display filters in Wireshark is Berkeley Packet Filter (BPF)
- ARichtig
- BFalsch
5Wireshark does not support additional columns outside of the default ones.
- ARichtig
- BFalsch
6tshark -i 1 -b duration:30 -w iacobacci.pcap
What will the command above do?- ACapture from interface 1, capture for 30 seconds, and write to Iacobacci.pcap
- BCapture from interface 1, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
- CRead the first 30 packets from Iaccbacci.pcap
- DCapture from interface 3, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
7Which of the following will capture from the first device listed?
- Atshark -d 1
- Btshark -l 1
- Ctshark -D 1
- Dtshark -i 1
8Which of the following command will display all devices available?
- Atshark -i
- Btshark -d
- Ctshark -l
- Dtshark -D
9One of the capture ring buffer options is filesize.
- ARichtig
- BFalsch
10When using filesize for either auto stop or capture ring buffer options the maximum is 4GiB.
- ARichtig
- BFalsch
11It is uncommon for companies to add a root certificate authority to the domain controller.
- ARichtig
- BFalsch
12Communication between 3 or more endpoints is called a conversation.
- ARichtig
- BFalsch
13Which of the following capture filters will display only TCP packets with the ACK flag set?
- Atcp.flags.ack == 1
- Back
- Ctcp[13]& 16==16
- Dtcp.ack
14Which operation's result is true when one of the inputs is true, but if they are both true its false.
- AXOR
- BNOT
- COR
- DAND
15To merge packets from within Wireshark you can use which menu option?
- AFile > Merge
- BYou can't merge in Wireshark
- CEdit > Merge
- DFile > Merge and Save
16Which of the following display filters will display all email traffic?
- Asmtp && pop && imap
- Bhttp || pop || imap
- Csmtp || pop || imap
- Dhttps && pop && imap
Informationen
- Beschreibung
- Protocol Analysis Quiz am Protocol Analysis: Quiz 2, erstellt von Matthew Sherman am 21/02/2019.
- Autor
- Matthew Sherman
- Sprache
- English
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz