Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 8 Question 41 Discussion

What information would the Wireshark filter in the screenshot list within the display window?
A) Only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80
B) Only traffic to or from IP address 192.168.1.12 and destined for port 80
C) Only traffic with a source address of 192.168.1.12 to or from port 80
D) Only traffic with a destination address of 192.168.1.12 to or from port 80

GIAC GCED Exam - Topic 8 Question 41 Discussion

Actual exam question for GIAC's GCED exam
Question #: 41
Topic #: 8
[All GCED Questions]

What information would the Wireshark filter in the screenshot list within the display window?

Show Suggested Answer Hide Answer
Suggested Answer: A

A company needs to classify its information as a key step in valuing it and knowing where to focus its protection.

Rotation of duties and separation of duties are both key elements in reducing the scope of information access and the ability to conceal malicious behavior.

Separation of duties helps minimize ''empire building'' within a company, keeping one individual from controlling a great deal of information, reducing the insider threat.

Security awareness programs can help other employees notice the signs of an insider attack and thus reduce the insider threat.

Detection is a reactive method and only occurs after an attack occurs. Only preventative methods can stop or limit an attack.


by Salley at Jun 03, 2024, 06:27 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ivette
8 months ago
I thought it was only for the source address, not destination.
upvoted 0 times
...
Howard
9 months ago
I agree, it should include both directions for port 80.
upvoted 0 times
...
Albina
9 months ago
Wait, is it really just HTTP traffic? That seems too specific.
upvoted 0 times
...
Jamey
9 months ago
I think it's only for traffic to port 80, not from it.
upvoted 0 times
...
Benton
9 months ago
It's definitely filtering for IP 192.168.1.12 and port 80.
upvoted 0 times
...
Reiko
9 months ago
I’m leaning towards option B because it mentions both directions, but I’m not completely confident about the wording.
upvoted 0 times
...
Venita
10 months ago
I feel like the question is asking about the source address, but I can't recall if it includes destination traffic too.
upvoted 0 times
...
Marquetta
10 months ago
I remember practicing a similar question, and I think it was about filtering traffic for a specific port. Could it be just for port 80?
upvoted 0 times
...
Golda
10 months ago
I think the filter is specifically for traffic to or from the IP address, but I'm not sure if it includes both directions.
upvoted 0 times
...
Tatum
10 months ago
I've got a good strategy for these types of Wireshark filter questions. I'll methodically evaluate each option to determine the correct answer.
upvoted 0 times
...
Mitsue
10 months ago
I'm a bit confused by the wording of the options. I'll need to re-read the question a few times to make sure I understand it fully.
upvoted 0 times
...
Terrilyn
10 months ago
Okay, let me break this down step-by-step. The key is understanding exactly what information the filter will display.
upvoted 0 times
...
Hermila
10 months ago
Hmm, I'm not totally sure about this one. I need to think through the different filter options carefully.
upvoted 0 times
...
Selma
10 months ago
This looks like a pretty straightforward Wireshark filter question. I think I can handle this one.
upvoted 0 times
...
Viva
10 months ago
Okay, let's see here. The first option about mouth IDS doesn't sound right to me. I'm not familiar with that term, so I'll skip that one.
upvoted 0 times
...
Providencia
10 months ago
Hmm, I'm a bit unsure about this one. I know there's a law of economics that deals with adding more labor, but I can't quite remember the name of it. I'll have to think this through carefully.
upvoted 0 times
...
Shelba
1 year ago
I bet the Wireshark filter is looking for traffic to or from 192.168.1.12 that's also destined for port 80 and includes a dancing unicorn. Just a hunch.
upvoted 0 times
...
Gail
1 year ago
Wait, isn't the filter looking for traffic with a destination address of 192.168.1.12 to or from port 80? Option D sounds like the correct one to me.
upvoted 0 times
...
Tegan
1 year ago
Hmm, I think the filter is specifically looking for traffic with a source address of 192.168.1.12 to or from port 80. Option C seems to be the answer here.
upvoted 0 times
Allene
1 year ago
You make a good point, option C does seem more inclusive.
upvoted 0 times
...
Belen
1 year ago
I think option A is too specific, option C covers a broader range of traffic.
upvoted 0 times
...
Jaclyn
1 year ago
But what about option A? It mentions HTTP traffic specifically.
upvoted 0 times
...
Weldon
1 year ago
I agree, option C seems to be the correct choice.
upvoted 0 times
...
...
Carolynn
1 year ago
I'm pretty sure the filter is looking for all traffic to or from 192.168.1.12 and port 80, not just HTTP. That's option B, right?
upvoted 0 times
France
1 year ago
User 3: Agreed, it's looking for traffic to or from that specific IP address and port.
upvoted 0 times
...
Tanesha
1 year ago
User 2: Yes, that's option B.
upvoted 0 times
...
Nichelle
1 year ago
User 1: I think the filter is for traffic to or from 192.168.1.12 and port 80.
upvoted 0 times
...
...
Ellen
1 year ago
The Wireshark filter in the screenshot would list only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80. This is the correct answer - Option A.
upvoted 0 times
Moon
1 year ago
Exactly, it's a very specific filter for that type of traffic.
upvoted 0 times
...
Olive
1 year ago
So, it's specifically filtering for HTTP traffic to or from that IP address on port 80.
upvoted 0 times
...
Caitlin
1 year ago
Yes, that's correct. It's option A in the answer choices.
upvoted 0 times
...
Glory
1 year ago
I think the filter would show only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80.
upvoted 0 times
...
...
Han
1 year ago
I'm not sure, but I think it might be B) Only traffic to or from IP address 192.168.1.12 and destined for port 80.
upvoted 0 times
...
Yesenia
1 year ago
I agree with Niesha, because the filter in the screenshot specifies both the IP address and port number for HTTP traffic.
upvoted 0 times
...
Niesha
1 year ago
I think the answer is A) Only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80.
upvoted 0 times
...

Save Cancel