05 Flashcards

1
Q

The ________ function is sent as the hexadecimal characters __________ and ____________

A

EOL, 0x0d0a, 0x0d

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

_____ Host - mapping FQDN to IPv4 address (Forward Lookup)

A

A1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

_____ Canonical Name, Mapping, Alias (commonly used for web servers)

A

Cname5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

____ Mail Exchanger (email servers)

A

MX15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

_____ Pointer – mapping IP to FQDN (Reverse Lookup)

A

PTR12

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

____ Start of authority - best source of information for this domain.

A

SOA6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

____ Service Location - locate servers hosting services for a specific
domain. SRV records allow for built-in load balancing of multiple
servers using the priority and weight values in the records.

A

SRV33

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

____ Host – mapping FQDN to IPv6 host addresse

A

AAAA28

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

____ Zone transfer - transfers of DNS cache/database

A

AXFR252

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

___________ involves an individual or malicious software (malware) gathering and
transmitting information by placing information at the beginning of a valid FQDN.

A

DNS Exfiltration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How do I see all dns header traffic? How do i see more of it?

A

dns

udp.port == 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How do I see all valid responses from a server?

A

dns.a

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do I find specific query types?

A

dns.qry.type == 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do I find all queries/responses specified with a FQDN?

A

dns.qry.name == “FQDN”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do I see all dns responses/requests?

A

dns.flags gt 8000 responses
dns.flags lt 8000
requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

________ A request for information about the communications options available on the
request/response chain.

A

OPTIONS

17
Q

_______ A request to retrieve whatever information is identified.

A

GET

18
Q

_________ Identical to GET, except the server MUST NOT return a message-body in the
response. This is used to obtain meta information about the requested item
without transferring the item itself, i.e., testing a hyperlink without actually
receiving the next web page.

A

HEAD

19
Q

_______ Used to request that the server accept the enclosed item from client as a new
subordinate of the server resource identified in the request.

A

POST

20
Q

How do i see all the http request methods in a capture?

How do I see alll tcp traffic everything

A

http.request.method

tcp.port == 80

21
Q

How do I see all referers in a capture?

A

http.referer

22
Q

What http response code is information?

A

1xx

23
Q

What http response code is Success

A

2xx

24
Q

What http response code is Redirect

A

3xx

25
Q

What http response code is Client Error

A

4xx

26
Q

What http response code is Server Error

A

5xx

27
Q

________ is an IETF application-layer control/signaling protocol for
creating, modifying, and terminating sessions with one or more participants that uses TCP or
UDP ports _______ and __________

A

SIP
5060
5061

28
Q

______________ is a data transfer protocol designed specifically to exchange
real-time sensitive, audio-visual data on IP-based networks.

A

RTP

29
Q

How do I see all sip/rtp sessions?

A

sip
rtp

30
Q

________ carries statistical and control data, while RTP
delivers the data.

A

RTCP

31
Q

:_______ filter shows all telnet application layer packets. How do I see every layers telnet packets?

A

telnet
tcp.port == 23

32
Q

How do I pick out specific data from a telnet packet?

A

telnet.data === data

33
Q

What ports does snmp use?

A

udp
161 request
162 trap

34
Q

How do I see all snmp application layer packets?

A

snmp

35
Q

How do I see all snmp request messages?

A

snmp.port == 161

36
Q

How do I see all snmp
trap messages?

A

snmp.port == 162

37
Q

How do I find specific data from a snmp packet?

A

snmp.data == <data></data>