Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 8 Question 41 Discussion

Posted by Salley on Jun 03, 2024 at 06:27 AM

What information would the Wireshark filter in the screenshot list within the display window?

Suggested Answer: A

A company needs to classify its information as a key step in valuing it and knowing where to focus its protection.

Rotation of duties and separation of duties are both key elements in reducing the scope of information access and the ability to conceal malicious behavior.

Separation of duties helps minimize ''empire building'' within a company, keeping one individual from controlling a great deal of information, reducing the insider threat.

Security awareness programs can help other employees notice the signs of an insider attack and thus reduce the insider threat.

Detection is a reactive method and only occurs after an attack occurs. Only preventative methods can stop or limit an attack.


Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
IV
Ivette 10 months ago
I thought it was only for the source address, not destination.
HO
Howard 11 months ago
I agree, it should include both directions for port 80.
AL
Albina 11 months ago
Wait, is it really just HTTP traffic? That seems too specific.
JA
Jamey 11 months ago
I think it's only for traffic to port 80, not from it.
BE
Benton 11 months ago
It's definitely filtering for IP 192.168.1.12 and port 80.
RE
Reiko 11 months ago
I’m leaning towards option B because it mentions both directions, but I’m not completely confident about the wording.
VE
Venita 12 months ago
I feel like the question is asking about the source address, but I can't recall if it includes destination traffic too.
MA
Marquetta 12 months ago
I remember practicing a similar question, and I think it was about filtering traffic for a specific port. Could it be just for port 80?
GO
Golda 12 months ago
I think the filter is specifically for traffic to or from the IP address, but I'm not sure if it includes both directions.
TA
Tatum 12 months ago
I've got a good strategy for these types of Wireshark filter questions. I'll methodically evaluate each option to determine the correct answer.
MI
Mitsue 12 months ago
I'm a bit confused by the wording of the options. I'll need to re-read the question a few times to make sure I understand it fully.
TE
Terrilyn 12 months ago
Okay, let me break this down step-by-step. The key is understanding exactly what information the filter will display.
HE
Hermila 1 year ago
Hmm, I'm not totally sure about this one. I need to think through the different filter options carefully.
SE
Selma 1 year ago
This looks like a pretty straightforward Wireshark filter question. I think I can handle this one.
VI
Viva 1 year ago
Okay, let's see here. The first option about mouth IDS doesn't sound right to me. I'm not familiar with that term, so I'll skip that one.
PR
Providencia 1 year ago
Hmm, I'm a bit unsure about this one. I know there's a law of economics that deals with adding more labor, but I can't quite remember the name of it. I'll have to think this through carefully.
SH
Shelba 1 year ago
I bet the Wireshark filter is looking for traffic to or from 192.168.1.12 that's also destined for port 80 and includes a dancing unicorn. Just a hunch.
GA
Gail 1 year ago
Wait, isn't the filter looking for traffic with a destination address of 192.168.1.12 to or from port 80? Option D sounds like the correct one to me.
TE
Tegan 1 year ago
Hmm, I think the filter is specifically looking for traffic with a source address of 192.168.1.12 to or from port 80. Option C seems to be the answer here.
AL
Allene 1 year ago
↳ replying to Tegan
You make a good point, option C does seem more inclusive.
BE
Belen 1 year ago
↳ replying to Tegan
I think option A is too specific, option C covers a broader range of traffic.
JA
Jaclyn 1 year ago
↳ replying to Tegan
But what about option A? It mentions HTTP traffic specifically.
WE
Weldon 1 year ago
↳ replying to Tegan
I agree, option C seems to be the correct choice.
CA
Carolynn 1 year ago
I'm pretty sure the filter is looking for all traffic to or from 192.168.1.12 and port 80, not just HTTP. That's option B, right?
FR
France 1 year ago
↳ replying to Carolynn
User 3: Agreed, it's looking for traffic to or from that specific IP address and port.
TA
Tanesha 1 year ago
↳ replying to Carolynn
User 2: Yes, that's option B.
NI
Nichelle 1 year ago
↳ replying to Carolynn
User 1: I think the filter is for traffic to or from 192.168.1.12 and port 80.
EL
Ellen 1 year ago
The Wireshark filter in the screenshot would list only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80. This is the correct answer - Option A.
MO
Moon 1 year ago
↳ replying to Ellen
Exactly, it's a very specific filter for that type of traffic.
OL
Olive 1 year ago
↳ replying to Ellen
So, it's specifically filtering for HTTP traffic to or from that IP address on port 80.
CA
Caitlin 1 year ago
↳ replying to Ellen
Yes, that's correct. It's option A in the answer choices.
GL
Glory 1 year ago
↳ replying to Ellen
I think the filter would show only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80.
HA
Han 2 years ago
I'm not sure, but I think it might be B) Only traffic to or from IP address 192.168.1.12 and destined for port 80.
YE
Yesenia 2 years ago
I agree with Niesha, because the filter in the screenshot specifies both the IP address and port number for HTTP traffic.
NI
Niesha 2 years ago
I think the answer is A) Only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80.
0/2000 characters

Save Cancel