MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does packet capture in networking refer to?
a. Blocking packets
b. Forwarding packets
c. Intercepting and storing network packets
d. Routing packets
Answer: c. Intercepting and storing network packetscpacket
Which tool is widely used for packet capturing and analysis?
a. PuTTY
b. Wireshark
c. Nmap
d. Netcat
Answer: b. Wiresharktestbook
What information does packet capture provide?
a. Summary of network routes
b. Payload, headers, and metadata of each packet
c. DNS cache data
d. IP address only
Answer: b. Payload, headers, and metadata of each packetcpacket
Packet capture is primarily used for which purpose?
a. Sending emails
b. Monitoring network performance and security
c. Increasing bandwidth
d. Generating traffic
Answer: b. Monitoring network performance and securitycpacket
What is the process called for monitoring and capturing data packets across a network?
a. Spoofing
b. Sniffing
c. Back doors
d. Interference
Answer: b. Sniffingprepmart
In packet capture, which network interface mode allows viewing all traffic?
a. Restrictive mode
b. Promiscuous mode
c. Defensive mode
d. Switch mode
Answer: b. Promiscuous modevskills
Which application layer protocol is typically inspected in packet captures for web traffic?
a. SMTP
b. HTTP
c. FTP
d. SNMP
Answer: b. HTTPsandilands
Which physical topology is recommended for safe packet capture in lab settings?
a. Star topology
b. Virtual network topology
c. Mesh network
d. Hybrid topology
Answer: b. Virtual network topologysandilands
Packet capture allows troubleshooting by showing:
a. Only error messages
b. Every communication between network devices
c. IP addresses only
d. Passwords in plain text
Answer: b. Every communication between network devicescpacket
Which layer of the OSI model is MOST associated with packet capture tools like Wireshark?
a. Presentation layer
b. Network layer
c. Physical layer
d. Application layer
Answer: b. Network layersandilands
What is an example of a packet capture format commonly used?
a. .zip
b. .pcap
c. .exe
d. .jpg
Answer: b. .pcapcpacket
Which practice is considered unethical with packet capture tools?
a. Capturing own network traffic
b. Capturing others’ traffic without consent
c. Using TCP filtering
d. Saving packets in .pcap format
Answer: b. Capturing others’ traffic without consentsandilands
Which application can capture wireless network packets?
a. WinSCP
b. Wireshark
c. Gedit
d. Firefox
Answer: b. Wiresharkwifisharks
What is the first step before analyzing network packets in Wireshark?
a. Set up an encrypted tunnel
b. Start capturing on the correct interface
c. Reboot the router
d. Ping a host
Answer: b. Start capturing on the correct interfacemytectra
What must NIC (Network Interface Card) do for packet capture?
a. Switch to full-duplex
b. Run in promiscuous mode
c. Disable port security
d. Enable DHCP
Answer: b. Run in promiscuous modevskills
Which of the following is NOT typically used for packet capture?
a. tcpdump
b. Wireshark
c. Netcat
d. Tshark
Answer: c. Netcatsandilands
Which protocol’s analysis is NOT directly possible with packet capture?
a. TCP
b. UDP
c. ICMP
d. Bluetooth file transfer
Answer: d. Bluetooth file transfersandilands
When capturing packets, which filter can reduce unnecessary data?
a. IP filter
b. Password filter
c. DPI filter
d. Bandwidth limiter
Answer: a. IP filtermytectra
Which network troubleshooting method relies heavily on packet capture?
a. Cable testing
b. Packet analysis
c. Firmware updating
d. NAT configuration
Answer: b. Packet analysiscpacket
What does Wireshark’s “Follow TCP Stream” feature help with?
a. Decoding encrypted messages
b. Viewing application-layer conversation
c. Updating firewall rules
d. Generating ARP packets
Answer: b. Viewing application-layer conversationmytectra
What does a packet sniffer do?
a. Blocks packets
b. Monitors and captures network traffic
c. Generates random packets
d. Reboots switches automatically
Answer: b. Monitors and captures network trafficstudocu
What type of packets can be captured during ARP resolution?
a. DHCP packets only
b. ARP packets
c. DNS queries only
d. Only TCP packets
Answer: b. ARP packetsreddit
For capturing packets traversing a router, Wireshark must be set up on:
a. Any network device
b. The router or an adjacent device with access to traffic
c. End-user PC only
d. Printer
Answer: b. The router or an adjacent device with access to trafficmytectra
Which file extension is most commonly associated with packet capture exports?
a. .docx
b. .pcap
c. .log
d. .json
Answer: b. .pcapcpacket
Which is a core advantage of full packet capture over flow sampling?
a. Summarized statistics only
b. Capture of full payload for forensic analysis
c. Loss of packet headers
d. Reduced compliance visibility
Answer: b. Capture of full payload for forensic analysisthundercattech
What is a famous command-line utility for packet capture on Linux?
a. ifconfig
b. tcpdump
c. traceroute
d. ping
Answer: b. tcpdumpsandilands
When analyzing packets, what is an indication of a SYN flood attack?
a. Multiple SYN packets without ACK responses
b. Constant ICMP replies
c. Large UDP packets
d. Excessive ARP packets
Answer: a. Multiple SYN packets without ACK responsesvaronis
Which protocol is most often filtered when capturing login credentials in transit?
a. FTP
b. BGP
c. OSPF
d. STP
Answer: a. FTPvaronis
Which type of network traffic tool can NOT capture packet contents?
a. Wireshark
b. SNMP manager
c. TCPdump
d. Tshark
Answer: b. SNMP managertestbook
Which capture setting avoids storing duplicate packets resulting from switch port mirroring?
a. Promiscuous mode
b. Filtering by MAC address
c. Disabling promiscuous mode
d. Using hub instead of switch
Answer: b. Filtering by MAC addresstestbook
Capturing packets “off the wire” means:
a. Decrypting encrypted traffic
b. Collecting packets directly as they travel over the network
c. Downloading packet logs from cloud
d. Routing packets to external device
Answer: b. Collecting packets directly as they travel over the networkcpacket
What is the main limitation of packet capture on high-speed networks?
a. Lack of filtering
b. Inability to decrypt SSL/TLS
c. Storage and processing capacity required
d. ARP request rate becomes too high
Answer: c. Storage and processing capacity requiredcpacket
What is packet reassembly in packet capture analysis?
a. Restoring packet headers
b. Combining fragmented packets into complete messages
c. Decoding encrypted traffic
d. Ignoring SYN packets
Answer: b. Combining fragmented packets into complete messagesvaronis
Which method would provide legal protection when analyzing captured packets?
a. Capturing only encrypted traffic
b. Having proper authorization and consent
c. Using open Wi-Fi networks
d. Using third-party analysis tools
Answer: b. Having proper authorization and consentsandilands
What feature distinguishes full packet capture from netflow data?
a. Only headers captured
b. Packet timing data only
c. Full payload and header inspection
d. Sampling strategy
Answer: c. Full payload and header inspectionthundercattech
Which security review function is made possible by packet capture?
a. Identifying malware signatures
b. Rebooting network switches
c. ARP cache refresh
d. Password rotation
Answer: a. Identifying malware signaturescpacket
What is the default file format when saving packet data in tcpdump?
a. .xml
b. .pcap
c. .dat
d. .csv
Answer: b. .pcapsandilands
During a packet capture session, what filter helps isolate HTTPS traffic?
a. port 80
b. port 443
c. port 21
d. port 25
Answer: b. port 443mytectra
Which statement is TRUE about wireless packet capture?
a. It can only capture TCP traffic
b. It can capture all frames if NIC supports monitor mode
c. It is limited to ARP packets only
d. Cannot capture application layer data
Answer: b. It can capture all frames if NIC supports monitor modewifisharks
Which setting on packet capture tools helps analyze VLAN traffic?
a. Enable ARP filtering
b. Enable 802.1Q tagging
c. Disable MAC filtering
d. Enable SSL decryption
Answer: b. Enable 802.1Q taggingmytectra
What ethical concern exists in public packet capturing?
a. Privacy violation risks
b. No legal risks
c. Inability to identify devices
d. Data cannot be exported
Answer: a. Privacy violation riskssandilands
What is a trace file in packet capture?
a. File containing random strings
b. File containing raw packet data captured
c. Web browser cache file
d. Printer spool file
Answer: b. File containing raw packet data capturedcpacket
What is one approach is used by capture devices to handle massive data rates?
a. Traffic throttling
b. Multi-core capture appliances
c. Disabling filtering
d. ARP table expansion
Answer: b. Multi-core capture appliancescpacket
What does a network protocol analyzer do?
a. Repairs packet loss
b. Captures and decodes network traffic for analysis
c. Deletes packets from routers
d. Prevents ARP flooding
Answer: b. Captures and decodes network traffic for analysisvaronis
What temporary storage is used during packet capture?
a. RAM
b. ROM
c. L2 cache
d. Registers
Answer: a. RAMsandilands
What does DPI stand for in packet analysis?
a. Deep Packet Inspection
b. Data Packet Internet
c. Digital Packet Interference
d. Device Packet Integration
Answer: a. Deep Packet Inspectionvaronis
When using Wireshark, what filter is used to display only DNS packets?
a. icmp
b. udp.port == 53
c. tcp.port == 443
d. arp
Answer: b. udp.port == 53mytectra
What is the most direct use of packet capture in network security?
a. Enforcing VLAN memberships
b. Detecting unauthorized data transfers
c. Disabling TCP
d. Flushing ARP caches
Answer: b. Detecting unauthorized data transfersvaronis
In packet capture, why is timestamping useful?
a. For measuring transmission speeds and latency
b. For encrypting packets
c. For resetting network switches
d. For automating DHCP assignments
Answer: a. For measuring transmission speeds and latencycpacket
Which type of packet capture is most suitable for compliance and forensic investigations?
a. Header-only capture
b. Full packet capture
c. Statistical sampling
d. Netflow summary
Answer: b. Full packet capturethundercattech

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info