2. Networking

Traffic Analysis — Quiz

Test your understanding of traffic analysis with 5 practice questions.

Practice Questions

Question 1

In Wireshark, what is the primary difference between capture filters and display filters?

Question 2

Which capture filter string limits packet capture to HTTP (TCP port 80) and HTTPS (TCP port 443) using BPF syntax?

Question 3

Which Wireshark feature displays packet rate statistics over time as a graph?

Question 4

Which of the following fields is NOT included in a standard NetFlow v5 record?

Question 5

An exporter sends 1800 flows over a 5-minute interval. What is the average flows per second? Show your calculation.