Weekend Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

An internal host at IP address 10.

GIAC GCED Full Course Access
GIAC GCED View All Questions

An internal host at IP address 10.10.50.100 is suspected to be communicating with a command and control whenever a user launches browser window. What features and settings of Wireshark should be used to isolate and analyze this network traffic?

A.

Filter traffic using ip.src = = 10.10.50.100 and tcp.srcport = = 80, and use Expert Info

B.

Filter traffic using ip.src = = 10.10.50.100 and tcp.dstport = = 53, and use Expert Info

C.

Filter traffic using ip.src = = 10.10.50.100 and tcp.dstport = = 80, and use Follow TCP stream

D.

Filter traffic using ip.src = = 10.10.50.100, and use Follow TCP stream

GCED PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now GCED pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
What is needed to be able to use taskkill to end a process on remote...
What would be the output of the following Google search?
Previous