Logical Operations Exam CFR-210 Topic 1 Question 63 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 63
Topic #: 1

A network engineer has collected a packet capture using Wireshark and given it to the team for analysis. The team is looking for activity based on the internal IP address of 10.0.25.123. Which of the following filters should the team use to look at only traffic for this IP?

Asource.ip == 10.0.25.123 && destination.ip == 10.0.25.123

Bsource tcp = 10.0.25.123 and destination tcp = 10.0.25.123

Csrc.ip == 10.0.25.123 or dst.ip == 10.0.25.123

Dsrc.ip = 10.0.25.123 or dst.ip = 10.0.25.123

Show Suggested Answer

Suggested Answer: D

by Junita at May 13, 2024, 05:28 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arleen

7 days ago

Haha, these options are a bit of a minefield, aren't they? I almost went with A, but C is definitely the way to filter this traffic.

upvoted 0 times

...

Cherelle

16 days ago

But wouldn't using 'or' in the filter show traffic going to or from the IP address, while we only want traffic specifically for that IP?

upvoted 0 times

...

Peggy

16 days ago

I agree with Krissy. C is the way to go - simple and effective. Gotta love that logical 'or' operator!

upvoted 0 times

...

Krissy

18 days ago

The correct answer is C. 'src.ip == 10.0.25.123 or dst.ip == 10.0.25.123' because we want to see all traffic for that IP address, whether it's the source or destination.

upvoted 0 times

...

Evangelina

21 days ago

I disagree, I believe the filter should be C) src.ip == 10.0.25.123 or dst.ip == 10.0.25.123.

upvoted 0 times

...

Cherelle

25 days ago

I think the correct filter is A) source.ip == 10.0.25.123 && destination.ip == 10.0.25.123.

upvoted 0 times

...