Question 1

How many bytes per packet does tcpdump capture by default?

Accepted Answer

A)  10 bytes 
B)  68 bytes 
C)  128 bytes 
D)  1024 bytes 
A)  10 bytes 
B)  68 bytes 
C)  128 bytes 
D)  1024 bytes

Question 2

One of the drawbacks of copying network traffic using a SPANned port is that a
SPANned port copies only valid Ethernet packets.

Accepted Answer

A) True 
 B)False

Question 3

What is a "gratuitous ARP request" and why is it dangerous?

Accepted Answer

It allows one computer to subs

Question 4

Sniffers put NICs into_________ , forcing them to listen in on all of the communications that are occurring on the network.

Accepted Answer

A)  Covert mode 
B)  Wiretap mode 
C)  Promiscuous mode 
D)  None of the above 
A)  Covert mode 
B)  Wiretap mode 
C)  Promiscuous mode 
D)  None of the above

Question 5

It is not possible to use a sniffer when connected to a network via a modem.

Accepted Answer

A) True 
 B)False

Question 6

Obtain the MAC address of a computer and describe how you did it.

Accepted Answer

This can be performed on a loc

Question 7

What is the approximate theoretical maximum number of bytes that can be downloaded in one minute on a 10BaseT network?

Accepted Answer

A)  10 Mb 
B)  75 Mb 
C)  100 Mb 
D)  175 Mb 
A)  10 Mb 
B)  75 Mb 
C)  100 Mb 
D)  175 Mb

Question 8

Which of the following is a valid MAC address?

Accepted Answer

A)  192.168.0.5 
B)  00:10:4b:de:fc:e9 
C)  0-0-e2-7a-c3-5b-6f 
D)  08-00-56-s7-fd-d4 
A)  192.168.0.5 
B)  00:10:4b:de:fc:e9 
C)  0-0-e2-7a-c3-5b-6f 
D)  08-00-56-s7-fd-d4

Question 9

Routers use Ethernet addresses to direct data between networks.

Accepted Answer

A) True 
 B)False

Question 10

It is possible to obtain file names from network traffic as well as the file contents.

Accepted Answer

A) True 
 B)False

Question 11

DHCP can be configured to assign a static IP address to a particular computer every time it is connected to the network.

Accepted Answer

A) True 
 B)False

Question 12

By default, tcpdump captures the entire contents of a packet.

Accepted Answer

A) True 
 B)False

Question 13

Describe how a computer obtains the Ethernet address of another computer that it wants to communicate with.

Accepted Answer

ARP reques

Question 14

One key point about MAC addresses is that they do not go beyond the router.

Accepted Answer

A) True 
 B)False

How many bytes per packet does tcpdump capture by default?

One of the drawbacks of copying network traffic using a SPANned port is that a SPANned port copies only valid Ethernet packets.

What is a "gratuitous ARP request" and why is it dangerous?

Sniffers put NICs into_________ , forcing them to listen in on all of the communications that are occurring on the network.

It is not possible to use a sniffer when connected to a network via a modem.

Obtain the MAC address of a computer and describe how you did it.

What is the approximate theoretical maximum number of bytes that can be downloaded in one minute on a 10BaseT network?

Which of the following is a valid MAC address?

Routers use Ethernet addresses to direct data between networks.

It is possible to obtain file names from network traffic as well as the file contents.

DHCP can be configured to assign a static IP address to a particular computer every time it is connected to the network.

By default, tcpdump captures the entire contents of a packet.

Describe how a computer obtains the Ethernet address of another computer that it wants to communicate with.

One key point about MAC addresses is that they do not go beyond the router.

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Digital Evidence on Mobile Devices

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence on the Internet

Digital Evidence at the Network and Transport Layers

Filters

Exam 24: Digital Evidence at the Physical and Data-Link Layers

How many bytes per packet does tcpdump capture by default?

One of the drawbacks of copying network traffic using a SPANned port is that a SPANned port copies only valid Ethernet packets.

What is a "gratuitous ARP request" and why is it dangerous?

Sniffers put NICs into_________ , forcing them to listen in on all of the communications that are occurring on the network.

It is not possible to use a sniffer when connected to a network via a modem.

Obtain the MAC address of a computer and describe how you did it.

What is the approximate theoretical maximum number of bytes that can be downloaded in one minute on a 10BaseT network?

Which of the following is a valid MAC address?

Routers use Ethernet addresses to direct data between networks.

It is possible to obtain file names from network traffic as well as the file contents.

DHCP can be configured to assign a static IP address to a particular computer every time it is connected to the network.

By default, tcpdump captures the entire contents of a packet.

Describe how a computer obtains the Ethernet address of another computer that it wants to communicate with.

One key point about MAC addresses is that they do not go beyond the router.

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Digital Evidence on Mobile Devices

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence on the Internet

Digital Evidence at the Network and Transport Layers

Filters