____ ensures data integrity and is a connection-oriented protocol that
follows the handshake methodology before the beginning of the session
to exchange data between two intended parties. Ans✓✓✓ TCP
____ in networking means the quantity of data segments, which is
measured in bytes, that a machine can transmit on the network without
receiving an acknowledgment. Ans✓✓✓ Windowing
____ is a client-server protocol used to send small clear-text messages. It
is typically used for computer system management and security auditing.
Ans✓✓✓ Syslog
____ is a common sniffer application that runs via the command line and
allows the user to intercept and display packets being transmitted or
received over a network. Ans✓✓✓ Tcpdump
____ is a process of controlling network traffic by checking incoming
packets against a predefined security policy. Ans✓✓✓ Packet filtering
____ is the process of verifying the identity of an individual. Ans✓✓✓
Authentication
____ is the process that permits a person, program, or device to have
access to data, functionality, or a service. Ans✓✓✓ Authorization
, A ____ scan is also known as a half-open scan because a full TCP
connection is never completed. Ans✓✓✓ TCP SYN
A user entered the command above.
What did the filter 'ip[9]=6' ask tcpdump to display? Ans✓✓✓ Only
show TCP packets.
A user enters the command above. What are they asking grep to do?
Ans✓✓✓ Show all lines that do not contain the word kitty in the file.
A user is attempting to view the file called Practice1.pcap using
tcpdump and received the error above. What did they do wrong?
Ans✓✓✓ They should have used the command tcpdump -r
Practice1.pcap
At which byte-offset is the Flags field located in a TCP header?
Ans✓✓✓ NOT:
6
At which byte-offset is the Protocol field located in an IP header?
Ans✓✓✓ 9
Data ____ guarantees that data is complete, correct, and not modified.
Ans✓✓✓ integrity
Does Frame #25 include any IP options? Ans✓✓✓ NOT: