200-201: Understanding Cisco Cybersecurity Operations Fundamentals

By Cisco · Question Mode

QuestionQ2

Host-Based Analysis

Question Image

Refer to the exhibit. Which frame numbers contain a file that can be extracted through a TCP stream in Wireshark?

Explanation

The transferred file payload is carried by the FTP Data packets in frames 14, 16, 18, and 19. TCP stream reassembly combines those payload-bearing segments into the file; the FTP control messages in frames 7 and 21 contain only the resume command and completion status.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!