Exam 200-201 topic 1 question 74 discussion

The correct is "D" Sniffing traffic on a specific interface sends to agent the full information.

"Datagram" is NOT only related to UDP, I'm surprised people mentioning it. Just read latest version of the TCP RFC, RFC 9293: "TCP segments are sent as internet datagrams. The Internet Protocol (IP) header carries several information fields, including the source and destination host addresses." "datagram: A message sent in a packet-switched computer communications network." Answer is D.

The answer is D. Tcpdump is a command-line tool used to capture and analyze network traffic in real-time. By sniffing traffic on a specific interface, the malicious insider could potentially obtain all information and data within the datagram, including: The source and destination IP addresses The source and destination ports The protocol type The payload data he other options are not correct. Option A is incorrect because tagged protocols are not part of the datagram. Option B is incorrect because firewall alerts and resulting mitigations are not captured by tcpdump. Option C is incorrect because tagged ports are not part of the datagram.

D. all information and data within the datagram Tcpdump is a packet capture tool that allows users to capture and analyze network packets in real-time. By capturing network traffic on a specific interface, the malicious insider would have been able to intercept and inspect the contents of the captured packets. This includes the payload data, headers, and any other information contained within the network datagrams.

You could use NMAP for tagged protocols. Why use TCPDUMP or wireshark for anything other than packet inspection?

The malicious insider attempted to obtain D. all information and data within the datagram by using the Tcpdump tool to sniff the traffic on a specific interface. Tcpdump is a powerful tool that can capture and display the contents of network packets, including the data within the datagram. By analyzing the captured data, the malicious insider can potentially obtain sensitive information such as login credentials, financial data, or confidential business information. This type of unauthorized network monitoring is a serious security threat, and appropriate measures should be taken to prevent it from happening in the future.

datagram is not exclusive of UDP

A is correct, D uses the word datagram which is a udp only concept. Tcpdump can take full packet capture.

Nop, the answer is good, in D the word datagrama damage the answer. It most wise select protocols, so A best answer

the answer should be D

correct id d full data