ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 11 - CWAP-404 discussion

Report
Export

Which one of the following is an advantage of using display filters that is not an advantage of capture-time filters?

A.
They allow for focused analysis on just the packets of interest
Answers
A.
They allow for focused analysis on just the packets of interest
B.
Once created they are reusable for later captures
Answers
B.
Once created they are reusable for later captures
C.
They only hide the packets from view and the filtered packets can be enabled for view later
Answers
C.
They only hide the packets from view and the filtered packets can be enabled for view later
D.
Multiple of them can be applied simultaneously
Answers
D.
Multiple of them can be applied simultaneously
Suggested answer: C

Explanation:

Display filters are applied after the capture is completed and they only hide the packets from view. The filtered packets are still present in the capture file and can be enabled for view later by changing or removing the display filter.This is an advantage over capture-time filters, which discard the packets that do not match the filter criteria and cannot be recovered later34Reference:

CWAP-403 Study Guide, Chapter 2: Protocol Analysis, page 37

CWAP-403 Objectives, Section 2.3: Apply display filters

asked 16/09/2024
Mitesh Patel
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first