CS206 Quiz 4

Q1. Expert infos in wireshark are only a hint and help both for novice and expert users to find probable _________

1. Network informations
2. Network traffic
3. Network congestion
4. Network Problems

Correct answer: Network Problems

Q2. UDP conversation statistics such as packet rate and bps rate can be obtained ____________.

1. In the Packet Details pane
2. In the Expert Information window
3. In the Protocol Hierarchy window
4. In the Conversations Window

Correct answer: In the Conversations Window

Q3. Wire shark allows a user to define up to _________differently colored

1. 3
2. 4
3. 5
4. 7

Correct answer: 7

Q4. In the context of Wireshark, which trace file should be opened to analyze delays before DNS queries?

1. tr-dnsqueries.pcapng
2. tr-serverresponse.pcapng
3. tr-tcphandshake.pcapng
4. tr-delays.pcapng

Correct answer: tr-delays.pcapng

Q5. How does Wireshark number each separate TCP conversation?

1. By port number
2. By TCP Stream Index (tcp.stream) value starting with 0
3. By IP address
4. By timestamp

Correct answer: By TCP Stream Index (tcp.stream) value starting with 0

Q6. Which of the following Internet based application(s) cannot tolerate data loss?

1. E-mail
2. Real-time

audio streaming · c. Interactive gaming · d. Web documents · e. Instant messaging

A. All of the given B. a, c and d

C. a, d and e

D. a and b only

Q7. Microsoft mainly employs a file sharing protocol called ____________________________ on its Windows-based networks.

1. Server Message Block (SMB)
2. Network File Service (NFS)
3. Apple File Protocol (AFP)
4. File Transfer Protocol (FTP)

Correct answer: Server Message Block (SMB)

Q8. What type of delay is likely not felt by the end user and can be safely ignored in trace files?

1. Delay before a DNS query
2. Delay before an HTTP GET request
3. Delay before a TCP RST packet
4. Delay before a TCP SYN packet

Correct answer: Delay before a TCP RST packet

Q9. Which of the following indicates that an encrypted connection is being closed?

1. A TLS handshake initiation
2. A TCP SYN packet
3. A TLS Encrypted Alert
4. A DNS query response

Correct answer: A TLS Encrypted Alert

Q10. In the context of a TCP handshake, SYN/ACK packet is used for ________________.

1. To acknowledge receipt of the SYN packet
2. To initiate data transfer
3. To terminate the connection
4. To request retransmission of lost packets

Correct answer: To acknowledge receipt of the SYN packet