Logical Operations Exam CFR-210 Topic 1 Question 63 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 63
Topic #: 1

A network engineer has collected a packet capture using Wireshark and given it to the team for analysis. The team is looking for activity based on the internal IP address of 10.0.25.123. Which of the following filters should the team use to look at only traffic for this IP?

Asource.ip == 10.0.25.123 && destination.ip == 10.0.25.123

Bsource tcp = 10.0.25.123 and destination tcp = 10.0.25.123

Csrc.ip == 10.0.25.123 or dst.ip == 10.0.25.123

Dsrc.ip = 10.0.25.123 or dst.ip = 10.0.25.123

Show Suggested Answer

Suggested Answer: D

by Junita at May 13, 2024, 05:28 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherman

1 months ago

Hmm, B is a bit too specific, focusing only on TCP traffic. C covers all the bases - both TCP and UDP, source and destination. Good call!

upvoted 0 times

Linn

24 hours ago

B) source tcp = 10.0.25.123 and destination tcp = 10.0.25.123

upvoted 0 times

...

Twila

7 days ago

A) source.ip == 10.0.25.123 && destination.ip == 10.0.25.123

upvoted 0 times

...

Elvera

8 days ago

I think C is the best option, it covers all types of traffic for the IP address.

upvoted 0 times

...

Arleen

1 months ago

Haha, these options are a bit of a minefield, aren't they? I almost went with A, but C is definitely the way to filter this traffic.

upvoted 0 times

Kyoko

7 days ago

I agree, C is the correct filter to use for that IP address.

upvoted 0 times

...

Cherelle

2 months ago

But wouldn't using 'or' in the filter show traffic going to or from the IP address, while we only want traffic specifically for that IP?

upvoted 0 times

...

Peggy

2 months ago

I agree with Krissy. C is the way to go - simple and effective. Gotta love that logical 'or' operator!

upvoted 0 times

Margot

16 days ago

C is the logical choice here. It simplifies the filter and focuses on the IP address we need.

upvoted 0 times

...

Dahlia

21 days ago

I agree, C is the way to go. It's straightforward and gets the job done.

upvoted 0 times

...

Gregg

25 days ago

Yeah, C is definitely the most efficient choice. It captures all traffic related to 10.0.25.123.

upvoted 0 times

...

Almeta

1 months ago

I think C is the best option too. It covers both source and destination IP addresses.

upvoted 0 times

...

Krissy

2 months ago

The correct answer is C. 'src.ip == 10.0.25.123 or dst.ip == 10.0.25.123' because we want to see all traffic for that IP address, whether it's the source or destination.

upvoted 0 times

...

Evangelina

2 months ago

I disagree, I believe the filter should be C) src.ip == 10.0.25.123 or dst.ip == 10.0.25.123.

upvoted 0 times

...

Cherelle

2 months ago

I think the correct filter is A) source.ip == 10.0.25.123 && destination.ip == 10.0.25.123.

upvoted 0 times

...