MENU
Bran is an incident handler who is assessing the network of the organization. In the
process, he wants to detect ping sweep attempts on the network using Wireshark tool.
Which of the following Wireshark filter he must use to accomplish this task?
Suggested Answer: A
Get Premium 212-89 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
PA
Pamella
12 months ago
I thought D might be relevant, but C seems more accurate.
NO
Novella
12 months ago
C is the go-to for ICMP echo requests, no doubt!
LO
Louann
12 months ago
Wait, are we sure about that? What about A?
AS
Asha
1 year ago
I think C is right too, makes sense for ping sweeps.
AN
Angella
1 year ago
Definitely C, that's the echo request type!
LE
Leah
1 year ago
I recall a similar question where we focused on ICMP types. I’m leaning towards "icmp.type==8" since it corresponds to echo requests.
LI
Linn
1 year ago
I’m a bit confused about the options. I thought "icmp.seq" could be useful, but it doesn’t seem directly related to ping sweeps.
PE
Penney
1 year ago
I remember practicing with Wireshark, and I feel like "icmp.type==8" was mentioned for echo requests. That could be the right choice.
RE
Refugia
1 year ago
I think the filter for detecting ping sweeps might be related to ICMP types, but I'm not entirely sure which one to pick.
VI
Vinnie
1 year ago
Kanban seems like the most logical choice to me. The ability to visualize the workflow and manage work in progress is exactly what the question is asking for. I feel pretty confident about this one.
HA
Halina
1 year ago
This seems straightforward, but I want to double-check my work. I'll make sure to show all my calculations clearly in case I need to justify my answer.
AN
Anna
1 year ago
I'm a bit unsure about this one. The terminology is a bit unfamiliar to me, so I'll need to review my notes on hunt groups and related concepts before I can feel confident about the answer.
LA
Latosha
1 year ago
This seems like a straightforward question about setting up a discount period for an intercompany transaction. I think I'll go with option B and set up a Trade Agreement with the appropriate date range.
TY
Tyisha
1 year ago
I'm a bit confused by the wording of the question. I'll need to read it over a few times to make sure I understand what they're asking.
JO
Jonelle
1 year ago
I bet the Wireshark filter for ping sweep detection is something really obscure, like 'icmp.redir_gw'. Nah, just kidding, it's definitely C. I mean, who doesn't love a good old-fashioned ICMP echo request hunt?
KR
Kristofer
1 year ago
Okay, let's see... Ping sweep detection, Wireshark filter... I'm going to have to go with C on this one. Gotta love those ICMP echo requests, they're like the breadcrumbs of the networking world.
KA
Kaycee
1 year ago
User 3: Yeah, ICMP type 8 is the key to finding those ping sweep attempts. Nice job!
SH
Shakira
1 year ago
User1: Definitely, it's a useful filter for detecting network scanning.
PH
Phuong
1 year ago
User 2: Good choice! ICMP echo requests are definitely the way to go for detecting ping sweeps.
VA
Vallie
1 year ago
User2: Yeah, that's correct. It's a common method for ping sweeps.
ER
Erick
1 year ago
User 1: C) icmp.type==8
AV
Avery
1 year ago
User1: I think C is the right choice, ICMP type 8 is for echo requests.
FL
Florinda
1 year ago
Ah, the classic ping sweep detection question. I'm going with C too. Who needs fancy network security tools when you've got good old Wireshark and the right ICMP filter? Time to catch those pesky hackers in the act!
AL
Alishia
1 year ago
Hmm, let me think about this. I'd say the answer is C as well. Detecting ping sweeps is all about finding those ICMP echo requests, and the Wireshark filter to do that is icmp.type==8. Easy peasy!
DE
Desmond
1 year ago
Ooh, a ping sweep detection task! This is right up my alley. I bet the answer is C, icmp.type==8. That's the ICMP echo request packet, which is exactly what you'd use to detect a ping sweep.
DE
Delisa
1 year ago
User 4: No need, let's go with C. It's the most likely option.
DA
Dahlia
1 year ago
User 3: Should we double check just to be sure?
KA
Katina
1 year ago
User 2: Yeah, that makes sense. ICMP echo request is used for ping sweeps.
FL
Florinda
1 year ago
User 1: I think the answer is C, icmp.type==8.
BR
Brett
1 year ago
User1: Great, let's use that filter in Wireshark to detect any ping sweeps on the network.
LO
Lovetta
1 year ago
User3: I agree, icmp.type==8 is the correct filter for this task.
SH
Sharen
1 year ago
User2: Yeah, that makes sense. That filter would help detect ping sweep attempts.
LA
Larae
1 year ago
User1: I think the answer is C, icmp.type==8.
OL
Olen
2 years ago
I'm not sure, but I think icmp.ident could also be used to detect ping sweep attempts.
CH
Chantay
2 years ago
I agree with Elbert, icmp.type==8 is the correct filter for detecting ping sweep attempts.
EL
Elbert
2 years ago
I think Bran should use option C) icmp.type==8 to detect ping sweep attempts.