QUESTION 39
The ip.addr != 10.2.4.1 display filter shows all packets except ones that contain the address 10.2.4.1 in the source or destination IP address fields.

QUESTION 40
Which transport is used for multicast and broadcast traffic?

QUESTION 41
You may need to capture traffic at different points on the network to identify the location of packet loss.

QUESTION 42

This packet shows the expanded TCP flags area. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identicalfiltering results.

QUESTION 43
The coloring of packets that match theBadTCPdefault coloring rule is permanent and cannot be edited.

QUESTION 44
The value *REF* in the Time column indicates that a packet has been marked.

QUESTION 45
The Protocol Hierarchy Statistics window helps identify unusual protocols and applications in captured traffic.

QUESTION 46

Which statement about this packet is correct?

QUESTION 47
Which format is used by capture filters?

QUESTION 48
Session Initiation Protocol (SIP) is a protocol that can be used to carry voice data.

QUESTION 49
Port resolution can use the TCP/IP stack services file to determine the correct destination port to use in the TCP or UDP header.

QUESTION 50
When you disable the UDP protocol decoding process, applications that use UDP (such as DHCP and DNS) will not bedecoded.

QUESTION 51
Window scaling is established during the TCP handshake process to enable hosts to use larger window sizes than is 65,535.

QUESTION 52

Which statement about this TCPstream is correct?

QUESTION 53

This is a DNS inverse query packet used to resolve an IP address to a host name.