Network Forensics
7 practice questions under this official exam objective (312-49v10) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
What Is an "Idle" System in an IP ID Idle Scan?
An "idle" system is the quiet helper host — the zombie — that an IP ID idle scan borrows to probe a target's ports without revealing the attacker's ad
OSI Layer for Network Traffic Monitoring
This question tests the understanding of network forensics and the OSI model layers involved in traffic capture. The correct answer is A because the q
ICMP Type 3 Code 13 Meaning
ICMP Type 3, Code 13 indicates that a packet was administratively prohibited or blocked. This explanation clarifies the specific meaning of this netwo
Cisco Router % SEC-6-IPACCESSLOGP Meaning
The Cisco log message % SEC-6-IPACCESSLOGP indicates that packet-matching logs were missed due to rate limiting or buffer unavailability. This page ex
Identifying Ping of Death via Oversized ICMP Packets
This question tests the ability to identify network attacks by analyzing packet characteristics in firewall logs. The presence of ICMP packets exceedi
TCP Source Port Number Size in Bits
The TCP header's source port number field is exactly 16 bits long, a fundamental constant of the TCP/IP protocol suite defined in RFC 793. This page c
Nmap TCP Window Scan OS Identification
This question tests the ability to identify operating systems using Nmap's TCP Window Scan (-sW) technique based on distinct TCP stack behaviors. It e