ETExamTower
Q2Host-Based Analysis

Refer to the exhibit. Which frame numbers contain a file that can be extracted through a TCP stream in Wireshark?

Question exhibit
← → navigate · a answer
Community votes
D
60% (3)
A
20% (1)
B
20% (1)
C
0% (0)
Discussion · 7
D 7
Selected Answer: D D. 14, 16, 18, and 19
3
I think it's A. Wireshark captures and shows network traffic at the packet level. If you extract a file from a TCP stream inside Wireshark, you are pulling the content of the captured packets tied to that specific file transfer. The extracted file will include the data payload from the frames in the TCP stream.
2
what is your answer? D or B?
D 2
Selected Answer: D It should be D.
A 2
Selected Answer: A Frames 7 through 21 all include the extractable file. Answer D is not correct because it leaves out the final acknowledgment (Frame 21), and that is part of the stream
B 1
Selected Answer: B B. 7 and 21
1
D "contain a file that is extractable" does not include the request though.