MENU
The following is an excerpt from the output of tcpdump -nli eth1 'udp':
13:03:17.277327 IP 192.168.123.5.1065 > 192.168.5.112.53: 43653+ A? lpi.org. (25)
13:03:17.598624 IP 192.168.5.112.53 > 192.168.123.5.1065: 43653 1/0/0 A 198.51.100.42 (41)
Which network service or protocol was used?
Suggested Answer: D, E
Get Premium 201-450 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
BE
Belen
11 months ago
Nah, could be something else, right?
RO
Rodrigo
11 months ago
The port 53 confirms it's DNS.
CA
Casie
11 months ago
Wait, are we sure about that?
LY
Lyndia
12 months ago
Totally agree, it's definitely DNS.
EL
Eliz
12 months ago
Looks like a DNS query to me.
KA
Kathrine
12 months ago
I thought FTP used different ports, but I'm confused about the other options. Could it really be DNS?
AL
Alecia
1 year ago
This question seems similar to one we practiced where we analyzed packet captures. I think the answer is definitely D, DNS.
JO
Josphine
1 year ago
I'm not entirely sure, but I feel like the presence of port 53 in the output indicates it's related to DNS.
RE
Reynalda
1 year ago
I remember studying about DNS queries and how they look in tcpdump, so I think the answer is D, DNS.
MA
Magdalene
1 year ago
I'm a bit confused by all the technical details in the question. Can someone explain what tcpdump is and how to interpret this output?
AZ
Azzie
1 year ago
Easy peasy! The destination port is 53, which is the standard port for DNS, so the answer is clearly D.
AU
Audria
1 year ago
Hmm, I'm not too sure about this one. The packet details mention UDP, so it could be DHCP as well. I'll have to think this through carefully.
JA
Jaclyn
1 year ago
This looks like a DNS query, so I'll go with option D.
MA
Margart
1 year ago
The key here is the destination port of 53, which indicates DNS traffic. I'm confident that D is the correct answer.
QU
Quentin
1 year ago
Hmm, I'm not too familiar with these government accessibility templates. I'll need to think this through and try to eliminate the options that don't seem quite right.
LE
Leatha
1 year ago
I'm a little confused by the wording of the question. Can someone clarify what exactly they're looking for in terms of the fraud scheme being described?
FL
Fletcher
1 year ago
This seems like a straightforward question about communicating risk assessment results. I'll focus on identifying the key elements that support effective communication with stakeholders.
FR
Frank
1 year ago
I'd like to see a version of this question that involves a 'traceroute' output. Now that would be a real brain-teaser!
LO
Louvenia
1 year ago
Okay, time to put my networking skills to the test! Let's see if I can ace this one.
JA
Jamey
1 year ago
C) SSH
NG
Nguyet
1 year ago
B) HTTP
TA
Tamesha
1 year ago
A) DNS
DO
Donette
1 year ago
Hmm, this is a no-brainer. Anyone who's ever used the internet should know that this is a DNS lookup.
VA
Val
1 year ago
DNS is used for translating domain names to IP addresses.
LE
Lenny
1 year ago
I agree, DNS is the correct answer.
AL
Alex
1 year ago
Yep, you're right. It's definitely a DNS lookup.
CL
Clay
2 years ago
Haha, I bet the person who wrote this question is a real network geek! But hey, at least it's not a trick question.
PE
Penney
1 year ago
E) DHCP
MO
Mona
1 year ago
C) SSH
MA
Marica
1 year ago
D) DNS
ME
Merissa
1 year ago
B) HTTP
LA
Laine
2 years ago
Yes, the IP addresses and port numbers in the output suggest DNS was used.
JE
Jenelle
2 years ago
I agree with Laurene, the output from tcpdump indicates DNS.
KA
Kaycee
2 years ago
The output clearly shows a DNS query and response, so the correct answer is D) DNS.
DA
Dana
1 year ago
Yes, you're right. It was a DNS query and response.
GA
Garry
1 year ago
I think the correct answer is D) DNS.
LA
Laurene
2 years ago
I think the network service or protocol used was DNS.