MCQ Bank

In Wireshark display filters, != means “not equal to.” The filter ip.addr != 10.1.1.1 excludes traffic involving that IP address and focuses on other traffic.

CS206 Final Term AI Solved

To decrypt the data, you need a secret password specifically called as__________.

A) Encryption Key
B) Encryption Equation
C) Frame Check Sequence
D) Cyclic Redundancy Check

AI Explanation

An encryption key is the secret value used to encrypt and decrypt protected data. The correct key is required to recover the original plaintext from encrypted information.

CS206 Final Term AI Solved

In ICMP packet of Type 5, code _______ refers to Redirect for host.

A) 0
B) 2
C) 1
D) None of the given

AI Explanation

For ICMP Type 5 Redirect messages, code 0 means redirect for network, while code 1 means redirect for host. Therefore, code 1 refers to Redirect for Host.

CS206 Final Term AI Solved

If IPv4 __________validation is disabled, there are no Expert Infos Errors in this trace file.

A) CRC
B) Checksum
C) None of given
D) Parity bit

AI Explanation

IPv4 checksum validation can be disabled in Wireshark. When checksum validation is disabled, Wireshark does not generate Expert Info errors related to invalid IPv4 checksums.

CS206 Final Term AI Solved

Point to point protocol is _____________ layer protocol.

A) Data Link
B) Application
C) Transport
D) Session

AI Explanation

Point-to-Point Protocol (PPP) operates at the Data Link layer of the OSI model. It provides framing and link-level communication over point-to-point connections.

CS206 Final Term AI Solved

The telephone generates analog signals ranging from ____________.

A) 0 to 5000 Hz
B) 0 to 8000 Hz
C) 0 to 6000 Hz
D) 0 to 4000 Hz

AI Explanation

Traditional telephone voice channels carry analog speech frequencies approximately from 0 to 4000 Hz. This bandwidth is sufficient for intelligible human speech while reducing transmission requirements.

CS206 Final Term AI Solved

ICMP packet type _______ refers to route redirection.

A) 9
B) 3
C) 4
D) 5

AI Explanation

ICMP Type 5 messages are Redirect messages used by routers to inform a host about a better route. Different Type 5 codes specify whether the redirect applies to a network, host, or other destination.

CS206 Final Term AI Solved

In asymmetric routing, traffic flowing from host A to host B flows from ________ path as compared to traffic flowing from host B to host A.

A) Different
B) Same or different
C) Exactly Same
D) None of the given

AI Explanation

In asymmetric routing, traffic between two hosts takes different paths in the two directions. Thus, the path from host A to host B differs from the path from host B to host A.

CS206 Final Term AI Solved

Which one is first step to Create Filter Expression Buttons in Wire shark?

A) Open tr-twohosts.pcapng
B) Open tr-smbjoindomain.pcapng
C) Open tr-winsize.pcapng
D) Open tr-general.pcapng

AI Explanation

The first step in the Wireshark procedure for creating Filter Expression Buttons is to open the specified capture file. In this exercise, that file is tr-twohosts.pcapng.

CS206 Final Term AI Solved

In the context of networks, AAA stands for __________.

A) Authentication, Authorization, and Accounting
B) Atomicity, Authority and Accountability
C) None of the given
D) Authentication, Authorization, and Agility

AI Explanation

AAA is a network security framework that provides Authentication, Authorization, and Accounting. These functions verify identity, control permitted access, and record user or system activity.

CS206 Final Term AI Solved

Q10

In ICMP packet of Type 5, code _______ refers to Redirect for Network.

A) 2
B) None of the given
C) 0
D) 1

AI Explanation

ICMP Type 5 is an ICMP Redirect message. Code 0 specifically indicates Redirect for Network, while code 1 indicates Redirect for Host.

CS206 Final Term AI Solved

Q11

Amount of data that can be carried in a frame is limited by ___________.

A) MTU
B) CRC
C) FCS
D) TTL

AI Explanation

The Maximum Transmission Unit (MTU) determines the maximum amount of data that can be carried in a network frame or packet without fragmentation. CRC and FCS are used for error detection, while TTL limits packet lifetime.

CS206 Final Term AI Solved

Q12

In AAA model, ________ means the process of deciding what resources a particular user can access.

A) Agility
B) Authentication
C) Accounting
D) Authorization

AI Explanation

Authorization is the AAA function that determines which resources or services a particular authenticated user is allowed to access. Authentication verifies identity, while accounting records activity.

CS206 Final Term AI Solved

Q13

Which one of the following statement is false about Wireshark software?

A) It is not a network packet analyzer
B) It captures network traffic
C) It works on both Wireless or Wired network
D) It is a network packet analyzer

AI Explanation

Wireshark is a network packet analyzer that captures and examines network traffic. It can analyse traffic from both wired and wireless networks, so the statement that it is not a packet analyzer is false.

CS206 Final Term AI Solved

Q14

Which one is first step to change the Dissector Behavior in Wire shark?

A) Open tr-winsize.pcapng
B) Open tr-general.pcapng
C) Open tr-smbjoindomain.pcapng
D) Open tr-youtubebad.pcapng

AI Explanation

The first step in the Wireshark procedure for changing dissector behavior is to open the specified general capture file. In this exercise, that file is tr-general.pcapng.

CS206 Final Term AI Solved

Q15

Port numbers can be reused without any problem if previous TCP connection is _____________.

A) Initiated
B) Terminated
C) Active
D) Open

AI Explanation

A TCP port number can generally be reused after the previous TCP connection using it has been terminated. An active or open connection still occupies its associated connection endpoint.

CS206 Final Term AI Solved

Q16

Wireshark captures and decodes the network frames of any host running on __________.

A) Wired Network only
B) None of the given
C) Either Wireless or Wired
D) Wireless Network only

AI Explanation

Wireshark can capture and decode network frames from both wired Ethernet and wireless networks. The available capture interfaces depend on the host and its network hardware.

CS206 Final Term AI Solved

Q17

To apply a MAC address filter in Wire shark we will enter _________________.

A) xx:xx:xx:xx:xx:xx Host ether
B) xx:xx:xx:xx:xx:xx ether host
C) Host ether xx:xx:xx:xx:xx:xx
D) ether host xx:xx:xx:xx:xx:xx

AI Explanation

The Wireshark capture filter syntax for a MAC address uses the form ether host followed by the MAC address. This filters Ethernet traffic associated with the specified host address.

CS206 Final Term AI Solved

Q18

Which of the following devices is not an interconnecting device?

A) Router
B) Switch
C) None of the given
D) Bridge

AI Explanation

Routers, switches, and bridges are all interconnecting devices used to connect network segments or devices. Therefore, none of the listed devices is excluded.

CS206 Final Term AI Solved

Q19

Which file will be opened to add coloring rule in Wire shark?

A) tr-winsize.pcapng
B) tr-smbjoindomain.pcapng
C) tr-general.pcapng
D) tr-chappellu.pcapng

AI Explanation

In the Wireshark exercise for adding a coloring rule, the general capture file is used. Therefore, the file to open is tr-general.pcapng.