Quiz
Protocol Analysis: Quiz 2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (16)
1What is data segregated by when under the TCP tab of the Endpoint statistics in wireshark?
- AIP, TCP, port
- BIP, UDP, port
- CIP, port
- DMAC, port
2What allows Wireshark to decode a protocol into various fields so the protocol can be displayed in the user interface?
- ADisplay filters
- BProtocol Hierarchy
- CProtocol dissections
- DEndpoints
3Which of the following is required to view the contents in plaintext of an SSL stream to which you control the server?
- APublic Key
- BUse Editcap to decrypt SSL streams
- CNothing Wireshark can decrypt SSL
- DPrivate Key
4The format for display filters in Wireshark is Berkeley Packet Filter (BPF)
- ATrue
- BFalse
5Wireshark does not support additional columns outside of the default ones.
- ATrue
- BFalse
6tshark -i 1 -b duration:30 -w iacobacci.pcap
What will the command above do?- ACapture from interface 1, capture for 30 seconds, and write to Iacobacci.pcap
- BCapture from interface 1, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
- CRead the first 30 packets from Iaccbacci.pcap
- DCapture from interface 3, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
7Which of the following will capture from the first device listed?
- Atshark -d 1
- Btshark -l 1
- Ctshark -D 1
- Dtshark -i 1
8Which of the following command will display all devices available?
- Atshark -i
- Btshark -d
- Ctshark -l
- Dtshark -D
9One of the capture ring buffer options is filesize.
- ATrue
- BFalse
10When using filesize for either auto stop or capture ring buffer options the maximum is 4GiB.
- ATrue
- BFalse
11It is uncommon for companies to add a root certificate authority to the domain controller.
- ATrue
- BFalse
12Communication between 3 or more endpoints is called a conversation.
- ATrue
- BFalse
13Which of the following capture filters will display only TCP packets with the ACK flag set?
- Atcp.flags.ack == 1
- Back
- Ctcp[13]& 16==16
- Dtcp.ack
14Which operation's result is true when one of the inputs is true, but if they are both true its false.
- AXOR
- BNOT
- COR
- DAND
15To merge packets from within Wireshark you can use which menu option?
- AFile > Merge
- BYou can't merge in Wireshark
- CEdit > Merge
- DFile > Merge and Save
16Which of the following display filters will display all email traffic?
- Asmtp && pop && imap
- Bhttp || pop || imap
- Csmtp || pop || imap
- Dhttps && pop && imap
Information
- Description
- Protocol Analysis Quiz on Protocol Analysis: Quiz 2, created by Matthew Sherman on 21/02/2019.
- Author
- Matthew Sherman
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz