Logical Operations Exam CFR-210 Topic 1 Question 63 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 63
Topic #: 1

A network engineer has collected a packet capture using Wireshark and given it to the team for analysis. The team is looking for activity based on the internal IP address of 10.0.25.123. Which of the following filters should the team use to look at only traffic for this IP?

Asource.ip == 10.0.25.123 && destination.ip == 10.0.25.123

Bsource tcp = 10.0.25.123 and destination tcp = 10.0.25.123

Csrc.ip == 10.0.25.123 or dst.ip == 10.0.25.123

Dsrc.ip = 10.0.25.123 or dst.ip = 10.0.25.123

Show Suggested Answer

Suggested Answer: D

by Junita at May 13, 2024, 05:28 PM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherman

2 months ago

Hmm, B is a bit too specific, focusing only on TCP traffic. C covers all the bases - both TCP and UDP, source and destination. Good call!

upvoted 0 times

Cheryl

4 days ago

Let's go with C then, it seems like the most comprehensive filter to use.

upvoted 0 times

...

Georgiana

13 days ago

Yeah, C is more inclusive and will give us a better overview of the activity.

upvoted 0 times

...

Sheridan

14 days ago

C) src.ip == 10.0.25.123 or dst.ip == 10.0.25.123

upvoted 0 times

...

Linn

17 days ago

B) source tcp = 10.0.25.123 and destination tcp = 10.0.25.123

upvoted 0 times

...

Twila

23 days ago

A) source.ip == 10.0.25.123 && destination.ip == 10.0.25.123

upvoted 0 times

...

Elvera

24 days ago

I think C is the best option, it covers all types of traffic for the IP address.

upvoted 0 times

...

Arleen

2 months ago

Haha, these options are a bit of a minefield, aren't they? I almost went with A, but C is definitely the way to filter this traffic.

upvoted 0 times

Becky

14 hours ago

Thanks for pointing that out, C is definitely the right choice for filtering that IP.

upvoted 0 times

...

Gearldine

2 days ago

I was also leaning towards A at first, but C makes more sense now.

upvoted 0 times

...

Tora

12 days ago

Yeah, C is the way to go for filtering traffic based on that IP.

upvoted 0 times

...

Kyoko

23 days ago

I agree, C is the correct filter to use for that IP address.

upvoted 0 times

...

Cherelle

2 months ago

But wouldn't using 'or' in the filter show traffic going to or from the IP address, while we only want traffic specifically for that IP?

upvoted 0 times

...

Peggy

2 months ago

I agree with Krissy. C is the way to go - simple and effective. Gotta love that logical 'or' operator!

upvoted 0 times

Margot

1 months ago

C is the logical choice here. It simplifies the filter and focuses on the IP address we need.

upvoted 0 times

...

Dahlia

1 months ago

I agree, C is the way to go. It's straightforward and gets the job done.

upvoted 0 times

...

Gregg

1 months ago

Yeah, C is definitely the most efficient choice. It captures all traffic related to 10.0.25.123.

upvoted 0 times

...

Almeta

2 months ago

I think C is the best option too. It covers both source and destination IP addresses.

upvoted 0 times

...

Krissy

2 months ago

The correct answer is C. 'src.ip == 10.0.25.123 or dst.ip == 10.0.25.123' because we want to see all traffic for that IP address, whether it's the source or destination.

upvoted 0 times

...

Evangelina

2 months ago

I disagree, I believe the filter should be C) src.ip == 10.0.25.123 or dst.ip == 10.0.25.123.

upvoted 0 times

...

Cherelle

3 months ago

I think the correct filter is A) source.ip == 10.0.25.123 && destination.ip == 10.0.25.123.

upvoted 0 times

...