Valid 312-38 Dumps shared by ExamDiscuss.com for Helping Passing 312-38 Exam! ExamDiscuss.com now offer the newest 312-38 exam dumps, the ExamDiscuss.com 312-38 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 312-38 dumps with Test Engine here:
Mark is monitoring the network traffic on his organization's network. He wants to detect a TCP and UDP ping sweep on his network. Which type of filter will be used to detect this on the network?
Correct Answer: D
To detect TCP and UDP ping sweeps on a network, the appropriate filter would be one that checks for packets directed at port 7, which is commonly used for the 'echo' service. This service is associated with ping functionality for both TCP and UDP protocols. Therefore, the correct filter to use would be Tcp.dstport==7 and udp.dstport==7, which checks for incoming packets where the destination port is 7 for both TCP and UDP traffic. This allows Mark to identify ping sweep attempts, as these would typically send packets to this port to elicit a response from the network.