9

Practice Questions

Network Forensics Practice QuestionsAdvanced Network Forensics Practice QuestionsAdvanced Network Forensics FTP Hydra Crack Practice QuestionsAdvanced Network Forensics Telnet Hydra Crack Practice QuestionsSIEM Practice QuestionsIncident Response Practice QuestionsLive Forensics Practice QuestionsDLP Regex Practice QuestionsSplunk Practice Questions

Advanced Network Forensics FTP Hydra Crack Practice Questions

Last Update Unknown

Advanced Forensics (Hydra FTP) Practice Questions

Click here to download the Wireshark capture for use in the following questions.

Q1: Refer to the trace. Which packet identifies the last incorrect login response (Hint: "ftp contains 530"):

Select one:

  • 103
  • 203
  • 303
  • 403
  • 503
Reveal Answer

The correct answer is: 303

Q2: Refer to the trace. Which is the password that has been successful:

Select one:

  • Admin
  • Administrator
  • napier
  • fred
  • root
Reveal Answer

The correct answer is: napier

Q3: Refer to the trace. In the IP header, which value identifies that we have a TCP segment:

Select one:

  • 3
  • 6
  • 4
  • 5
  • 0
Reveal Answer

The correct answer is: 6

Q4: Refer to the trace. Which is not a password that is used to try and crack the password (Hint: ftp contains "PASS"):

Select one:

  • password
  • none
  • anon
  • fred
  • 123456
Reveal Answer

The correct answer is: 123456

Q5: Refer to the trace. Which is not a user name that is used to try and crack the username (Hint: ftp contains "USER"):

Select one:

  • napier
  • test1
  • test123
  • fred
  • test
Reveal Answer

The correct answer is: test123

Q6: Refer to the trace. Which is the user name that has been successful:

Select one:

  • Admin
  • fred
  • root
  • Administrator
  • napier
Reveal Answer

The correct answer is: Administrator

Q7: Refer to the trace. For the IP header, how many bytes are used:

Select one:

  • 140
  • 10
  • 60
  • 20
  • 1
Reveal Answer

The correct answer is: 20

Q8: Refer to the trace. Which is not a FTP response code that has been used (Hint: ftp.response.code):

Select one:

  • 331
  • 200
  • 230
  • 530
Reveal Answer

The correct answer is: 200

Q9: Refer to the trace. Which is the code returned when the server on a successful login:

Select one:

  • 530
  • 331
  • 230
  • 220
Reveal Answer

The correct answer is: 230

Q10: Refer to the trace. What is the MAC address of the gateway that connects the client to the FTP server:

Select one:

  • ff:ff:ff:ff:ff:ff
  • 00:00:00:00:00:00
  • 00:0c:29:0f:71:a3
  • 00:50:56:c0:00:08
  • There is no gateway
Reveal Answer

The correct answer is: There is no gateway

Q11: Refer to the trace. Which is the code returned when the server on an unsuccessful login:

Select one:

  • 530
  • 331
  • 230
  • 220
Reveal Answer

The correct answer is: 530

Q12: Refer to the trace. In the IP header, which ASCII character identifies IPv4:

Select one:

  • F
  • .
  • E
  • 4
  • f
Reveal Answer

The correct answer is: E

Q13: Refer to the trace. Which packet identifies the first incorrect login response (Hint: "ftp contains 530"):

Select one:

  • 108
  • 103
  • 303
  • 403
  • 503
Reveal Answer

The correct answer is: 108

Q14: Refer to the trace. In the IP header, which hex value identifies IPv4:

Select one:

  • 0x40
  • 0x04
  • 0x01
  • 0x00
  • 0x45
Reveal Answer

The correct answer is: 0x45

Q15: Refer to the trace. In the Ethernet header, which value identifies that we have an IP packet:

Select one:

  • 0x8888
  • 0x1234
  • 0x0800
  • 0x8000
  • 0x0000
Reveal Answer

The correct answer is: 0x0800