nerdexam
Cisco

200-201 · Question #134

Refer to the exhibit. What should be interpreted from this packet capture?

The correct answer is B. IP address 192.168.122.100/50272/81.179.179.69/80/6 is sending a packet from port 50272 of. The packet capture shows a TCP SYN-ACK packet originating from IP 192.168.122.100, port 50272, destined for IP 81.179.179.69, port 80, indicating that 192.168.122.100 is sending this packet from its port 50272.

Submitted by kavita_s· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. What should be interpreted from this packet capture?

Exhibit

200-201 question #134 exhibit

Options

  • AIP address 179.179.69/50272/192.168.122.100/80/6 is sending a packet from port 80 of IP
  • BIP address 192.168.122.100/50272/81.179.179.69/80/6 is sending a packet from port 50272 of
  • CIP address 192.168.122.100/50272/81.179.179.69/80/6 is sending a packet from port 80 of IP
  • DIP address 179.179.69/50272/192.168.122.100/80/6 is sending a packet from port 50272 of IP

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    78% (21)
  • C
    7% (2)
  • D
    11% (3)

Why each option

The packet capture shows a TCP SYN-ACK packet originating from IP 192.168.122.100, port 50272, destined for IP 81.179.179.69, port 80, indicating that 192.168.122.100 is sending this packet from its port 50272.

AIP address 179.179.69/50272/192.168.122.100/80/6 is sending a packet from port 80 of IP

This choice incorrectly identifies the source IP address as 179.179.69 and implies the packet is sent from port 80, which contradicts the packet capture.

BIP address 192.168.122.100/50272/81.179.179.69/80/6 is sending a packet from port 50272 ofCorrect

The packet capture line clearly indicates that the source IP address is 192.168.122.100 and the source port is 50272, while the destination IP is 81.179.179.69 and the destination port is 80. Therefore, the packet is being sent by 192.168.122.100 from its port 50272 to 81.179.179.69 on port 80, with '6' representing the TCP protocol.

CIP address 192.168.122.100/50272/81.179.179.69/80/6 is sending a packet from port 80 of IP

While it correctly identifies the source and destination IP/port, it incorrectly states that the packet is being sent from port 80, when the packet clearly originates from port 50272.

DIP address 179.179.69/50272/192.168.122.100/80/6 is sending a packet from port 50272 of IP

This choice incorrectly identifies the source IP address as 179.179.69 and reverses the actual source and destination, which is inaccurate.

Concept tested: Packet header interpretation (TCP/IP)

Source: https://learn.microsoft.com/en-us/training/modules/configure-tcp-ip/

Topics

#packet capture analysis#TCP/IP fundamentals#source/destination ports#IP addresses

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-201 Practice