During a controlled lab exercise, a student wants to observe what happens at the packet level during each exploitation step. What approach matches the lesson?

### Why this is right The exercise asks students to capture traffic while repeating the lab activity, save packets after each step, and analyze the result at packet level. Saving each stage makes it possible to connect observed traffic to the action that produced it. ### The concept A packet capture records network communications for later review. Capturing each step separately supports comparison and helps an analyst understand how activity appears in traffic. The exercise is a controlled learning task and should be performed only in an authorized environment. ### The other options - **B. Wait until all steps are finished and rely only on memory**: this loses the step-by-step evidence the exercise requires. - **C. Disable packet capture so the exercise runs faster**: this removes the packet-level observations the task is designed to collect. - **D. Use only a graph and discard the captured packets**: graphs summarize traffic but do not replace the packet details needed for analysis. ### Terms - **Interface**: a system’s connection point to a network, such as the interface selected for capture. ### Remember Capture and label each authorized lab stage while it happens.