M20-02Security Monitoring · quiz
Read the Conversation
A capture contains several conversations. Identify the one that proves whether the web service is reachable and whether TCP completed.
1
Which sequence proves a TCP session was established?
2
A DNS query receives a valid A record, but the TCP SYN to port 443 receives no reply. What layer should you investigate next?
3
Which capture filter focuses on HTTPS traffic?
4
What does a five-tuple identify?