Latest Exam Prep

NEW QUESTION 58
When you apply a display filter, the Status Bar indicates the total number ofpackets captured and the packets displayed.

NEW QUESTION 59
The gratuitous ARP process is not required if a host is configured with a static IP address.

NEW QUESTION 60
In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.

NEW QUESTION 61
If a DHCP client does not receive an acknowledgment before the expiration of the rebinding time, the DHCP client must release its IP address and send a DHCP broadcast tolocate a DHCP server or Relay Agent.

NEW QUESTION 62
Whichdisplay filter is used to display all DHCP traffic?

NEW QUESTION 63
By default, Wireshark will only dissect port 443 traffic as SSL/TLS traffic. If you are using another port for SSL/TLS communications, you must add that port number in the HTTP preferences setting for SSL/TLS ports.

NEW QUESTION 64
Which transport is used for multicast and broadcast traffic?

NEW QUESTION 65
The value *REF* in the Time column indicates that a packet has been marked.

NEW QUESTION 66

This packet was sent from an HTTP client.

NEW QUESTION 67
How do you determine which Profile is in use while you are capturing traffic?

NEW QUESTION 68
Port resolution can use the TCP/IP stack services file to determine the correct destination port to use in the TCP or UDP header.

NEW QUESTION 69

This packet shows the expanded TCP flags area. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identicalfiltering results.

NEW QUESTION 70
You can use the display filter ss1. record.content_type = =22 to view just the SSL/TLS handshakepackets.

NEW QUESTION 71

Which statement aboutthis color rule is correct?

NEW QUESTION 72
How do you quickly spot large gapsin time between packets in a trace file containing 6,000 packets?

NEW QUESTION 73
What is the most efficient method for saving non-contiguous packets in a trace file?

NEW QUESTION 74
The coloring of packets that match theBadTCPdefault coloring rule is permanent and cannot be edited.

NEW QUESTION 75

The image depicts eight files that are part of a file set.

NEW QUESTION 76
DNS can onlyresolve IP addresses to host names.

NEW QUESTION 77
Session Initiation Protocol (SIP) is a protocol that can be used to carry voice data.

NEW QUESTION 78
You may need to capture traffic at different points on the network to identify the location of packet loss.

NEW QUESTION 79
The TCP Time-Sequence graph can depict packet loss.

NEW QUESTION 80
Whichstatement about ICMP is true?

NEW QUESTION 81
You have opened a trace file that has been sent to you and you noticed the timestamp only offers millisecond-level time values. You can enable Wireshark to add themicrosecond detail information to these packets.