NEW QUESTION 41
Window scaling is established during the TCP handshake process to enable hosts to use larger window sizes than is 65,535.

NEW QUESTION 42
You are analyzing network traffic, but you only see ARP queries – you do not see any ARP responses. What could cause this situation?

NEW QUESTION 43
Both sides of a TCP connection must negotiate a common receive window size value.

NEW QUESTION 44
Some ICMP packets include portions of the original packet that triggered the ICMP response.

NEW QUESTION 45
The capture and displayfilter syntax for TCP communications is tcp.

NEW QUESTION 46
Which Wireshark feature is used to make the process of following TCP Sequence/Acknowledgment numbers easier to interpret?

NEW QUESTION 47
Which protocol is used to locate the hardware address of a local target or local router?

NEW QUESTION 48
Whichdisplay filter is used to display all DHCP traffic?

NEW QUESTION 49
The capture filter syntax for all FTPcommand and data channel traffic is tcp port 21.

NEW QUESTION 50

Which statement about this traffic is correct?

NEW QUESTION 51

This image shows frame 2781which is a Window Update packet. This packet indicates that 10.0.52.164’s TCP Window Size field value has increased since the last packet sent by that host.

NEW QUESTION 52

This packet was sent from an HTTP client.

NEW QUESTION 53
The TCP Time-Sequence graph can depict packet loss.

NEW QUESTION 54
A host has just booted up. This host is allowed to send ARP queries for the MAC address of thelocal DNS server before sending gratuitous ARPs to test for duplicate IP addresses on the network.

NEW QUESTION 55
Whichstatement about ICMP is true?

NEW QUESTION 56
Network analysis is oftenconsidered ‘electronic surveillance’ or ‘wiretapping* and may be illegal.

NEW QUESTION 57
Which statement about TCP sequence and acknowledgment numbering is correct?

NEW QUESTION 58
The ip.addr != 10.2.4.1 display filter shows all packets except ones that contain the address 10.2.4.1 in the source or destination IP address fields.

NEW QUESTION 59
DHCP is based on BOOTP.

NEW QUESTION 60
In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.