GIAC GCED Exam - Topic 1 Question 78 Discussion

Actual exam question for GIAC's GCED exam

Question #: 78
Topic #: 1

[All GCED Questions]

What feature of Wireshark allows the analysis of one HTTP conversation?

AFollow UDP Stream

BFollow TCP Stream

CConversation list > IPV4

DSetting a display filter to 'tcp'

Show Suggested Answer

Suggested Answer: B

Follow TCP Stream is a feature of Wireshark that allows the analysis of a single TCP conversation between two hosts over multiple packets. Filtering packets using tcp in the filter box will return all TCP packets, not grouping by a single TCP conversation. HTTP is TCP not UDP, so you cannot follow a HTTP stream over UDP.

by Armando at May 15, 2026, 10:03 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!