Free CompTIA CySA+ CS0-003 Practice Question

You are a network analyst tasked with investigating a suspected data exfiltration attempt. Which tcpdump command would you use to capture all packets from the IP address '192.168.1.100' and store the output in a file named 'capture.pcap'?

  • tcpdump -w capture.pcap host 192.168.1.100

  • tcpdump -i eth0 host 192.168.1.100

  • tcpdump -s 0 -w capture.pcap host 192.168.1.100

  • tcpdump -i eth0 -w capture.pcap host 192.168.1.100

This question's topic:
CompTIA CySA+ CS0-003 / 
Security Operations
Your Score:

Check or uncheck an objective to set which questions you will receive.