Fundamentals of InfoSecintermediate
Select ALL statements that accurately describe the Wireshark activity when performed with authorization.
Answer
Select the interface used to reach the Internet before starting the capture., The `http.request or http.response` filter can display HTTP requests and responses., Follow TCP Stream presents packets from a conversation together for inspection.
Explanation
### Why this is right
- **A** is correct: selecting the active interface allows Wireshark to observe traffic moving through that interface.
- **B** is correct: the expression selects packets identified as HTTP requests or HTTP responses.
- **C** is correct: Follow TCP Stream assembles a TCP conversation into a more readable view of its exchange.
### The concept
A packet capture records network packets visible at the selected interface. Display filters help you focus on relevant protocols or addresses, and stream-following tools help reconstruct a conversation from packets. These features support analysis, but do not classify traffic as malicious automatically. Interpret observations in context and capture only with permission.
### The other options
- **D. A Wireshark capture filter automatically proves that every captured packet is malicious.**: a filter selects traffic; it does not establish intent or maliciousness.
### Terms
- **HTTP**: Hypertext Transfer Protocol. The protocol used for web requests and responses.
- **TCP**: Transmission Control Protocol. A protocol that carries ordered, reliable data between endpoints.
### Remember
Filters organize evidence; they do not decide whether the evidence is malicious.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free