Test
Protocol Analysis: Quiz 2
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (16)
1What is data segregated by when under the TCP tab of the Endpoint statistics in wireshark?
- AIP, TCP, port
- BIP, UDP, port
- CIP, port
- DMAC, port
2What allows Wireshark to decode a protocol into various fields so the protocol can be displayed in the user interface?
- ADisplay filters
- BProtocol Hierarchy
- CProtocol dissections
- DEndpoints
3Which of the following is required to view the contents in plaintext of an SSL stream to which you control the server?
- APublic Key
- BUse Editcap to decrypt SSL streams
- CNothing Wireshark can decrypt SSL
- DPrivate Key
4The format for display filters in Wireshark is Berkeley Packet Filter (BPF)
- AVerdadero
- BFalso
5Wireshark does not support additional columns outside of the default ones.
- AVerdadero
- BFalso
6tshark -i 1 -b duration:30 -w iacobacci.pcap
What will the command above do?- ACapture from interface 1, capture for 30 seconds, and write to Iacobacci.pcap
- BCapture from interface 1, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
- CRead the first 30 packets from Iaccbacci.pcap
- DCapture from interface 3, roll over to the next file after 30 seconds, and write to Iacobacci.pcap
7Which of the following will capture from the first device listed?
- Atshark -d 1
- Btshark -l 1
- Ctshark -D 1
- Dtshark -i 1
8Which of the following command will display all devices available?
- Atshark -i
- Btshark -d
- Ctshark -l
- Dtshark -D
9One of the capture ring buffer options is filesize.
- AVerdadero
- BFalso
10When using filesize for either auto stop or capture ring buffer options the maximum is 4GiB.
- AVerdadero
- BFalso
11It is uncommon for companies to add a root certificate authority to the domain controller.
- AVerdadero
- BFalso
12Communication between 3 or more endpoints is called a conversation.
- AVerdadero
- BFalso
13Which of the following capture filters will display only TCP packets with the ACK flag set?
- Atcp.flags.ack == 1
- Back
- Ctcp[13]& 16==16
- Dtcp.ack
14Which operation's result is true when one of the inputs is true, but if they are both true its false.
- AXOR
- BNOT
- COR
- DAND
15To merge packets from within Wireshark you can use which menu option?
- AFile > Merge
- BYou can't merge in Wireshark
- CEdit > Merge
- DFile > Merge and Save
16Which of the following display filters will display all email traffic?
- Asmtp && pop && imap
- Bhttp || pop || imap
- Csmtp || pop || imap
- Dhttps && pop && imap
Información
- Descripción
- Protocol Analysis Test sobre Protocol Analysis: Quiz 2, creado por Matthew Sherman el 21/02/2019.
- Autor
- Matthew Sherman
- Idioma
- English
- Visitas
- 0
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test