Questions

Now, it's time to check your knowledge. Select the best response, and then check your answers with those in the Assessment appendix:

1. A _____ in Wireshark represents two endpoints that are communicating with each other.
   1. Match point
   2. Tuple
   3. Conversation
   4. Filter
2. Wireshark is capable of dissecting hundreds of protocols. To see a list of all of the protocols present in a given capture, go to Statistics and then _____.
   1. Protocol Hierarchy
   2. Conversations
   3. IPv4 Statistics
   4. Match point
3. Currently, when you save a file, the default file format in Wireshark is _____.
   1. snoop.gz
   2. .pcapng
   3. .pcap
   4. erf.gz
4. When working with packets, right-click on a specified packet or packets of interest and select _____, which will turn the selected packet(s) black.
   1. Ignore
   2. Snoop
   3. Spatter
   4. Mark
5. When you select Export Objects _____, Wireshark will locate and include all objects that include applications/javascript, images, and text/html, and then display a list of the objects found.
   1. DNS
   2. DICOM
   3. HTTP
   4. SMB
6. Prior...