nerdexam
Cisco

200-201 · Question #302

Refer to the exhibit. What should be interpreted from this packet capture?

The correct answer is C. 192.168.1.18 is sending a packet from port 1983 to port 1983 of IP address 192.168.7.138 using. The packet capture indicates that IP address 192.168.1.18 is initiating a TCP connection by sending a SYN packet from port 1983 to port 1983 on 192.168.7.138.

Submitted by kev92· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. What should be interpreted from this packet capture?

Exhibit

200-201 question #302 exhibit

Options

  • A192.168.7.138 is sending a packet from port 1983 to port 1983 of IP address 192.168.1.18 using
  • B192.168.7.138 is sending a packet from port 1983 to port 1983 of IP address 192.168.1.18 using
  • C192.168.1.18 is sending a packet from port 1983 to port 1983 of IP address 192.168.7.138 using
  • D192.168.1.18 is sending a packet from port 1983 to port 1983 of IP address 192.168.7.138 using

How the community answered

(41 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    83% (34)
  • D
    2% (1)

Why each option

The packet capture indicates that IP address 192.168.1.18 is initiating a TCP connection by sending a SYN packet from port 1983 to port 1983 on 192.168.7.138.

A192.168.7.138 is sending a packet from port 1983 to port 1983 of IP address 192.168.1.18 using

This option describes the packet flow in the opposite direction from what the correct answer implies for source and destination IP addresses.

B192.168.7.138 is sending a packet from port 1983 to port 1983 of IP address 192.168.1.18 using

This option is incorrect because it specifies UDP as the protocol, whereas the packet clearly uses TCP, and also misidentifies the source and destination IPs.

C192.168.1.18 is sending a packet from port 1983 to port 1983 of IP address 192.168.7.138 usingCorrect

The exhibit, interpreted in conjunction with the correct answer, describes a TCP packet where the source IP is 192.168.1.18 and the destination IP is 192.168.7.138, with both source and destination ports being 1983, and the packet is identified as a [SYN] packet, indicating a connection attempt.

D192.168.1.18 is sending a packet from port 1983 to port 1983 of IP address 192.168.7.138 using

This option incorrectly states UDP as the protocol instead of TCP and also reverses the source and destination IP addresses compared to the intended interpretation of the correct answer.

Concept tested: Wireshark packet interpretation, TCP connection initiation

Source: https://www.wireshark.org/docs/wsug_html_chunked/ChBuildProtocolTree.html

Topics

#Packet Analysis#TCP/IP#Network Protocols#Wireshark

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-201 Practice