exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 675 discussion

Actual exam question from CompTIA's SY0-601
Question #: 675
Topic #: 1
[All SY0-601 Questions]

An organization has hired a security analyst to perform a penetration test. The analyst captures 1Gb worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to further review the pcap?

  • A. Nmap
  • B. cURL
  • C. Netcat
  • D. Wireshark
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sujon_london
Highly Voted 1 year, 8 months ago
Selected Answer: D
Nmap: Nmap is a network scanning tool used for discovering hosts and services on a network. cURL: cURL is a command-line tool for transferring data with URLs. It's commonly used to send and receive data over various protocols, such as HTTP. Netcat: Netcat (nc) is a versatile networking utility often referred to as the "Swiss Army knife" of networking. It can create TCP and UDP connections, transfer files, and perform various networking tasks. D. Wireshark: Wireshark is specifically designed for capturing and analyzing network packets. It provides a graphical user interface for dissecting and analyzing captured network data, making it the most appropriate tool for reviewing a pcap file to understand the content and behavior of the captured network traffic.
upvoted 15 times
...
Gabuu
Most Recent 1 year ago
Answer is D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago