Latest Exam Prep

Q53. Null scans use legal TCP packet formats, but listen for illegally-formed TCP response packets.

Q54. Display filters areapplied to decrease the time required to identify the cause of poor network performance, unusual network traffic patterns or other traffic of interest.

Q55. Network analysis is oftenconsidered ‘electronic surveillance’ or ‘wiretapping* and may be illegal.

Q56.

Which statement about this traffic is correct?

Q57. POP requests consist of a Request Command and Request Parameter.

Q58. Which statement about TCP sequence and acknowledgment numbering is correct?

Q59. The IPv4 Total Length field defines the length of the IP header, valid data and data link padding.

Q60. Which protocol is used to locate the hardware address of a local target or local router?

Q61.

Which statement about this packet is correct?

Q62. When you disable the UDP protocol decoding process, applications that use UDP (such as DHCP and DNS) will not bedecoded.

Q63. You are performing a TCP scan on a target while capturing your traffic with Wireshark. Which statement about the analysis is correct?

Q64. Which transport is used for multicast and broadcast traffic?

Q65. Time reference packets are permanently given a timestamp of 00:00:00. When you close and reopen the trace filethe time reference information is retained.

Q66. During an ideal data transfer process, the TCP Time-Sequence graph plot points should run from the lower left corner to the upper rightcorner in a diagonal line of i-bars.

Q67. You may need to capture traffic at different points on the network to identify the location of packet loss.

Q68. Baselines of basic VoIP traffic patterns should include analysis of the call setup and actual call process traffic.