Port resolution can use the TCP/IP stack services file to determine the correct destination port to use in the TCP or UDP header.

A. True

B. False

This packet shows the expanded TCP flags area. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identicalfiltering results.

A. True

B. False

ThePrepare a Filterfeature creates a display filter in the display filter window, but does not apply the filter to the traffic.

A. True

B. False

What is the purpose of creating Wireshark profiles?

A. create a customized method of name resolution

B. discover and test RSA keys for traffic decryption

C. customize Wireshark for more efficient analysis in specific environments

D. create a manageable database of packets for use in third-party programs

This packet was sent from an HTTP client.

A. True

B. False

Which protocol is used to locate the hardware address of a local target or local router?

A. ip

B. ARP

C. DNS

D. DHCP

ICMP is used as a messaging system for errors, alerts,and general notifications on an IP network.

A. True

B. False

A. The source and destination hosts support window scaling.

B. This packet is establishing window scaling between the two TCP hosts.

C. The Window Size field value indicates that no additional data can be received by 10.0.52.164.

D. The Sequence Number field value is too low to allow additional data segments to be received by10.0.52.164.

How do you quickly spot large gapsin time between packets in a trace file containing 6,000 packets?

A. Open and examine Wireshark'sExpert Infoswindow.

B. Look for packets colorized based on Wireshark's default coloring rule for high delta times.

C. Set the Time column toSeconds Since Beginning of Captureand scroll through the trace file.

D. Set the Time column toSeconds Since Previously Displayed Packetand sort the Time column.

The Protocol Hierarchy Statistics window helps identify unusual protocols and applications in captured traffic.

A. True

B. False

In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.

A. True

B. False

Which traffic characteristic is often seen when analyzing database applications that transfer individual records across the network?

A. small packet sizes

B. multicast responses

C. large delays between transmissions

D. separate connections for each record