Refer to the exhibit. In the PCAP file, what is the MAC address of the server that has 443 port open?

The correct answer is A. b4:2a:0e:f2:27:83. To determine the MAC address of the server that has port 443 open, we need to identify the device acting as the server, which corresponds to the system accepting traffic on port 443 (usually HTTPS). Looking at the image: The destination IP for all the packets in the list is…

Submitted by renata2k· Mar 6, 2026Network Intrusion Analysis

Question

Exhibit

Options

Ab4:2a:0e:f2:27:83
B7c:5c:f8:9f:d1:fc
Cunknown
DIntelCor_9f:d1:fc

How the community answered

(25 responses)

A
80% (20)
B
12% (3)
C
4% (1)
D
4% (1)

Explanation

To determine the MAC address of the server that has port 443 open, we need to identify the device acting as the server, which corresponds to the system accepting traffic on port 443 (usually HTTPS). Looking at the image: The destination IP for all the packets in the list is 185.52.170.27, which is the server since the traffic is going towards port 443 (a common web server port). The MAC address of the destination device (server) is shown in the Ethernet II section as b4:2a:0e:f2:27:83, which corresponds to the destination address.

Topics

#Wireshark#PCAP Analysis#MAC Address#Port 443#Network Forensics

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice