Free CompTIA CySA+ CS0-003 Practice Question
A security analyst suspects that an internal machine is participating in a Distributed Denial-of-Service (DDoS) attack. To confirm this, they decide to capture the traffic from the suspected machine. Using tcpdump, which command should the analyst execute to capture all traffic to and from the machine with the IP address 192.168.1.105?
tcpdump host 192.168.1.105
tcpdump port 80 and host 192.168.1.105
tcpdump -host 192.168.1.105
tcpdump net 192.168.1.0/24
This question's topic:
CompTIA CySA+ CS0-003 /
Security Operations
SAVE $49