2. Why is Wireshark widely used in cybersecurity?

It provides real-time packet capture and deep network protocol analysis

9. Why is selecting the correct network interface important in Wireshark?

To ensure the capture includes only relevant traffic

10. What is a common sign of data exfiltration in Wireshark?

Large amounts of outbound traffic to unknown IP addresses

1. What is the primary purpose of network traffic analysis?

To monitor, capture, and analyze network packets

8. What type of packets indicate a possible brute-force login attempt?

A high number of failed authentication attempts in a short time

3. What are the main panes in Wireshark's interface?

Packet List, Packet Details, and Packet Bytes

7. How can Wireshark help in detecting malware communication?

By analyzing suspicious DNS requests

studbud

Quiz Quiz: Network Traffic Analysis with Wireshark

10 termsStudBud Administration1 play

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
2. Why is Wireshark widely used in cybersecurity?
It provides real-time packet capture and deep network protocol analysis
It scans for viruses on a network
It encrypts network traffic
It blocks malicious IP addresses automatically
2
6. What does TCP stand for?
Traffic Control Processing
Transmission Control Protocol
Total Communication Protocol
Temporary Connection Path
3
9. Why is selecting the correct network interface important in Wireshark?
To ensure the capture includes only relevant traffic
To encrypt network data
To block unauthorized access
To change the network bandwidth
4
10. What is a common sign of data exfiltration in Wireshark?
A sudden drop in network speed
Only local network traffic being captured
Wi-Fi disconnections
Large amounts of outbound traffic to unknown IP addresses
5
4. Which feature in Wireshark allows you to narrow down displayed packets?
Firewall settings
Packet duplicator
Display filter
Capture filter
6
1. What is the primary purpose of network traffic analysis?
To monitor, capture, and analyze network packets
To block unauthorized websites
To test internet speed
To configure routers
7
8. What type of packets indicate a possible brute-force login attempt?
A high number of failed authentication attempts in a short time
Only encrypted traffic in the capture
A single failed login attempt
A sudden drop in network traffic
8
3. What are the main panes in Wireshark's interface?
Firewall, Intrusion Detection, and Packet Viewer
File Manager, Packet Sender, and Log Viewer
Browser, Terminal, and Process Manager
Packet List, Packet Details, and Packet Bytes
9
7. How can Wireshark help in detecting malware communication?
By scanning files for viruses
By analyzing suspicious DNS requests
By blocking malicious websites automatically
By deleting harmful packets
10
5. What protocol is commonly used for web traffic analysis in Wireshark?
FTP
SMTP
HTTP/HTTPS
DNS

Quiz Quiz: Network Traffic Analysis with Wireshark Flashcards | StudBud