Exam 312-49v10 topic 1 question 265 discussion

Follow the **LITERAL** phrasing of the question: At what layer of the OSI model are you monitoring while watching traffic to and from the router? Capture takes place at data link, while monitoring takes place at whatever layer your target operates. Wireshark **captures** traffic at the Data Link Layer (Layer 2), the act of monitoring depends on the layer at which the device (in this case, the router) operates. A router operates at the Network Layer (Layer 3), so you are **monitoring** traffic at the Network Layer when analyzing the router's activity. A. Network: Correct – Routers operate at the Network layer (Layer 3). B. Transport: Incorrect – Deals with end-to-end communication protocols like TCP/UDP, not routers. C. Data Link: Incorrect – Manages direct node-to-node data transfer, relevant for switches, not routers. D. Session: Incorrect – Manages sessions between applications, (Layer 5).

The Answer is right. The OSI model's network layer (Layer 3) includes IP addresses and routing information.

The correct answer is C. When using Ethereal (now known as Wireshark) to capture traffic on a router, you are monitoring at the Data Link layer (Layer 2) of the OSI model. This layer is responsible for framing, error control, and flow control of data transmitted over a network. At the Data Link layer, you can see packet headers, MAC addresses, and other information related to the local network segment. This allows you to monitor and analyze traffic to and from the router, including potential attacker activity. A. Network (Layer 3): This layer is responsible for routing and addressing, but you're not monitoring at this layer with Ethereal. B. Transport (Layer 4): This layer is responsible for reliable data transfer, but you're not monitoring at this layer with Ethereal. D. Session (Layer 5): This layer is responsible for establishing, managing, and terminating connections, but you're not monitoring at this layer with Ethereal.

Capturing you do at datalink layer