Multiple Choice Questions on Wireshark for Cybersecurity Basics

📚 Quick Study Guide

• 🌐 What is Wireshark? A free and open-source packet analyzer.
• 🔍 Key Features: Captures network traffic in real-time and analyzes it.
• 🛠️ Common Uses: Troubleshooting network issues, examining security problems, verifying applications, and debugging protocol implementations.
• 🚦 Packet: The fundamental unit of data transmitted over a network.
• 🛡️ Security Analysis: Wireshark allows you to inspect packet contents to identify suspicious activity.
• 🎯 Filters: Wireshark's display filters allow you to focus on specific traffic. Example: `http.request.method == "GET"`
• 📈 TCP Handshake: The three-way handshake ($SYN$, $SYN-ACK$, $ACK$) establishes a TCP connection.

🧪 Practice Quiz

1. Which of the following best describes Wireshark?

   • A) A firewall
   • B) An intrusion detection system
   • C) A packet analyzer
   • D) An antivirus program

2. What is the primary purpose of Wireshark?

   • A) To encrypt network traffic
   • B) To capture and analyze network traffic
   • C) To block malicious websites
   • D) To optimize network speed

3. Which TCP handshake step acknowledges the SYN-ACK packet?

   • A) SYN
   • B) ACK
   • C) FIN
   • D) RST

4. What is the function of a display filter in Wireshark?

   • A) To encrypt captured packets
   • B) To highlight specific packets based on criteria
   • C) To block unwanted network traffic
   • D) To compress captured data

5. Which of the following is NOT a common use for Wireshark?

   • A) Troubleshooting network issues
   • B) Identifying malware on a host
   • C) Debugging protocol implementations
   • D) Writing malicious code

6. What type of information can be analyzed using Wireshark?

   • A) Only the source and destination IP addresses
   • B) Only the size of the packets
   • C) The entire contents of network packets
   • D) Only the MAC addresses

7. What does the filter `http.request.method == "POST"` do?

   • A) Displays only HTTP GET requests.
   • B) Displays only HTTP POST requests.
   • C) Displays all HTTP traffic.
   • D) Clears all display filters.