Questions

Now, it’s time to check your knowledge. Select the best response, then check your answers, which can be found in the Assessments appendix:

1. A(n) _____(or a moving graph symbol) represents actively exchanging data. If present, you can select that interface and begin capturing traffic.
   1. GPL
   2. sparkline
   3. API
   4. Wiki
2. So that you can see all the traffic that is coming into the network interface card, make sure the card is in _____ mode.
   1. sparkline
   2. RFC
   3. generous
   4. promiscuous
3. A _____ engine provides an API to capture traffic from the network before the traffic is processed by the operating system.
   1. CACE
   2. pcap
   3. tcap
   4. capinfos
4. _____ provides information on how to break down the protocols into the proper format, according to the appropriate RFC or other specification.
   1. Protocol tree
   2. Dissector filters
   3. Capinfos
   4. Dissectors
5. Wireshark has several CLI tools that complement the basic functionality, ____ can merge multiple capture files into one.
   1. tshark
   2. capinfos
   3. mergecap
   4. text2pcap
6. If you don...