Questions

Now, it's time to check your knowledge. Select the best response and then check your answers, which can be found in the Assessments appendix:

1. Once you begin capturing packets, you might have a dozen or so files in the Open file area. If you want to remove the files, go to the File menu. Then, choose Open Recent and _____ Menu.
   1. Clear
   2. Purge
   3. Delete
   4. Freshen
2. Seconds Since _____ is used when you apply a display filter, as it will show how many seconds have passed since the previously displayed packet, which will more accurately show gaps in time.
   1. Recently Created Epoch
   2. Previously Captured Packet
   3. Beginning of Capture
   4. Previously Displayed Packet
3. ___ is a shortcut to turn the coloring rules on or off. The shortcut is also available on the main toolbar (under the Telephony menu).
   1. Colorize Conversation
   2. Coloring Rules
   3. Stop Color Filters
   4. Colorize Packet List
4. The _____ menu choice in Wireshark allows you to control the look of the displayed packets, including the ability to...