week2
Wireshark – Week 2 Practical Quiz Scenarios: Captures, Filters, Packet Anatomy, Fragmentation & TTL 1. A user reports slow HTTP access to a web server at 10.10.10.50. You can install Wireshark on the client PC. What is the most practical first step? A. Run Wireshark on the client and capture all traffic during the slow access B. Immediately lower the client’s MTU and test again, without capturing C. Change the client’s DNS servers and hope the issue goes away D. Clear the ARP cache and assume the problem is solved Check Answer 2. You are capturing on the client for HTTP issues. Which display filter is most practical to view only traffic between the client 10.10.10.20 and server 10.10.10.50 over TCP port 80? A. http B. ip.addr == 10.10.10.20 && ip.addr == 10.10.10.50 && tcp.port == 80 ...