nerdexam
(ISC)2

301B · Question #33

A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error. Which options will trace this issue?

The correct answer is B. tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x. See the full explanation below for the reasoning.

Question

A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error. Which options will trace this issue?

Options

  • Atcpdump -i external -X -e -nn -vv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 ssldump -r /shared/ssl_problem.cap -n -x
  • Btcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x
  • Ctcpdump -i external -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 > /shared/ssl_problem.cap ssldump -r /shared/ssl_problem.cap -n -x
  • Dtcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 > /shared/ssl_problem.cap ssldump -n -x < /shared/ssl_problem.cap

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    82% (18)
  • C
    9% (2)
  • D
    5% (1)

Community Discussion

No community discussion yet for this question.

Full 301B Practice