Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-38 Exam - Topic 2 Question 23 Discussion

James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic against a PING sweep attack. Which of the following Wireshark filters will he use?
D) lcmp.type==8 or icmp.type==0
A) lcmp.type==0 and icmp.type==16
B) lcmp.type==8 or icmp.type==16
C) lcmp.type==8 and icmp.type==0

Eccouncil 312-38 Exam - Topic 2 Question 23 Discussion

Actual exam question for Eccouncil's 312-38 exam
Question #: 23
Topic #: 2
[All 312-38 Questions]

James is working as a Network Administrator in a reputed company situated in California. He is monitoring his network traffic with the help of Wireshark. He wants to check and analyze the traffic against a PING sweep attack. Which of the following Wireshark filters will he use?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Galen at May 09, 2022, 08:59 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Devora
8 months ago
Just to clarify, isn't "lcmp" a typo? Should be "icmp"?
upvoted 0 times
...
Willetta
9 months ago
I agree with D, it's the most logical choice here.
upvoted 0 times
...
Marg
9 months ago
Wait, isn't it supposed to be option C? I'm confused.
upvoted 0 times
...
Almeta
9 months ago
I thought it was option B at first, but D makes more sense.
upvoted 0 times
...
Mariann
9 months ago
Definitely option D! That's the right filter for PING sweeps.
upvoted 0 times
...
Jerlene
9 months ago
I keep mixing up the types, but I think option B might be the one since it includes both requests and replies.
upvoted 0 times
...
Dyan
9 months ago
I thought it was about distinguishing between echo requests and replies, so maybe option C could be relevant?
upvoted 0 times
...
Amie
9 months ago
I think I remember that PING uses ICMP type 8 for echo requests, so maybe option D is correct?
upvoted 0 times
...
Benedict
9 months ago
I'm not entirely sure, but I feel like there was a practice question about filtering ICMP types that had similar options.
upvoted 0 times
...
Rosendo
10 months ago
This seems like a pretty straightforward question, but there are a lot of moving parts. I'll need to make sure I understand the different perspectives presented by the characters and how they relate to the investment policy statement elements. Careful analysis will be key here.
upvoted 0 times
...
Elke
10 months ago
This seems like a tricky question. I'll need to carefully consider the key issues around portfolio management and prioritization that are mentioned.
upvoted 0 times
...
Heike
10 months ago
I'm a bit confused by the different patterns mentioned. I'll need to make sure I understand what each one entails before selecting an answer.
upvoted 0 times
...

Save Cancel