Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Wireshark WCNA Exam - Topic 7 Question 8 Discussion

Posted by Lachelle on Jan 09, 2025 at 10:53 AM

Refer to the exhibit.

This packet shows the expanded TCP flags are

a. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identical filtering results.

Suggested Answer: A

Get Premium WCNA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
25 comments · newest first
CY
Cyndy 10 months ago
False, the flags have different meanings in those filters.
YO
Yolando 11 months ago
Just checked, the filters do look different.
LA
Lavelle 11 months ago
Wait, are you sure about that? Seems off to me!
MA
Marisha 11 months ago
Totally agree, but I think the filters might not be identical.
MA
Mammie 11 months ago
The TCP flags are crucial for connection management.
ME
Melvin 12 months ago
I remember discussing how the flags work in class, but I'm a bit confused about the filter syntax here. I think I might lean towards false, but I'm not completely confident.
EF
Effie 12 months ago
I believe the filters are supposed to give different results because of how the flags are set. I just can't remember if it's true for this specific case.
RE
Renea 12 months ago
I practiced a similar question where we had to compare different TCP flag filters. I feel like they might not always yield the same results, but I can't recall the exact details.
HA
Hana 1 year ago
I think I remember that the TCP flags can be tricky, especially with the syntax in filters. I'm not entirely sure about the equality in those filters though.
AL
Aleshia 1 year ago
I'm pretty confident I know the answer to this one. The display filters are essentially doing the same thing, just using different syntax. I'll select the "True" option and move on to the next question.
SH
Shaun 1 year ago
Okay, I think I've got this. The key is to understand that the tcp.flags.syn==1 && tcp.flags.ack==1 filter is looking for the SYN and ACK flags set, while the tcp.flags=0x12 filter is looking for the specific hex value of 0x12, which represents the SYN and ACK flags. So they should provide the same filtering results.
KI
Kimberely 1 year ago
Hmm, I'm a bit confused by the wording of the question. I'll need to double-check the syntax of those display filters to make sure I'm interpreting them correctly.
OD
Odelia 1 year ago
This looks like a tricky question about TCP flags. I'll need to carefully review the exhibit and the answer choices to make sure I understand the difference between the display filters.
PA
Paris 2 years ago
Haha, I bet the exam writers came up with these trick questions just to keep us on our toes! But I think the answer is B - False.
IZ
Izetta 2 years ago
↳ replying to Paris
I think you're right, the answer is definitely False.
TE
Tesha 2 years ago
↳ replying to Paris
I agree, it does seem like a tricky question.
CL
Clarence 2 years ago
Hmm, that's a good point. I see where you're coming from now.
SO
Solange 2 years ago
I'm not sure about the equivalence of the two display filters. The question seems straightforward though.
SK
Skye 2 years ago
The expanded TCP flags shown in the packet seem to be SYN and ACK, which is correct. The display filters mentioned should provide similar results.
BI
Billye 2 years ago
↳ replying to Skye
Yes, the expanded TCP flags are indeed SYN and ACK.
DA
Daryl 2 years ago
↳ replying to Skye
The display filters mentioned should provide similar results.
TH
Theron 2 years ago
↳ replying to Skye
B) False
HO
Hollis 2 years ago
↳ replying to Skye
A) True
IS
Isaac 2 years ago
I disagree, I believe the answer is False because the display filters are not actually checking for the same thing.
CL
Clarence 2 years ago
I think the answer is True because both display filters are checking for the same TCP flags.
0/2000 characters

Save Cancel