MENU
Refer to the exhibit.
What is the expected result when the "Allow subdissector to reassemble TCP streams" feature is enabled?
Suggested Answer: B
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Enabling the ''Allow subdissector to reassemble TCP streams'' feature in Wireshark allows the tool to reassemble TCP segments into a contiguous sequence, which can be used by higher-level protocols to reconstruct a full message, such as an HTTP request or response.This is particularly useful for extracting files or data transmitted over TCP that are spread across multiple packets1.
12 comments · newest first
MO
Moon
2 months ago
I’m not so sure. A could also be valid, but D feels more accurate.
BE
Bettyann
2 months ago
I agree, D seems right. It helps in analyzing complete streams.
TE
Teddy
2 months ago
I think the answer is D. It makes sense to unfragment TCP.
LA
Lauran
2 months ago
Definitely not C, that would make no sense!
FL
Fletcher
3 months ago
I thought it just inserted subdissectors, not unfragmented them.
TR
Troy
3 months ago
Wait, does that mean it can handle fragmented packets too?
OL
Ollie
3 months ago
Totally agree, option D is correct!
FR
Francesco
3 months ago
It allows TCP streams to be unfragmented.
AL
Alishia
3 months ago
I vaguely recall that enabling this feature is supposed to help with unfragmenting TCP, so D seems like a strong possibility.
SU
Sunshine
3 months ago
I feel like the answer could be A since it mentions subdissectors, but I’m not completely confident about that.
MI
Michel
4 months ago
I remember practicing a question like this, but I’m not entirely sure if it directly relates to extracting files or just handling TCP packets.
DE
Devorah
4 months ago
I think enabling that feature helps with reassembling fragmented TCP streams, so I might lean towards option D.