nerdexam
(ISC)2

301B · Question #38

301B Question #38: Real Exam Question with Answer & Explanation

The correct answer is D. The 'GET /etetge.html' request does not match the actual page location.. See the full explanation below for the reasoning.

Question

The following decoded tcpdump capture shows the trace of a failing health monitor.
00:00:13.245104 IP 10.29.29.60.51947 > 10.0.0.12.http: P 1:59(58) ack 1 win 46 <nop,nop,timestamp 2494023368 238093769> out 0tcl/tmm3 <ls=0x0000_4500_00b6_0b1b_4000_0006_ce0a_11d0_04dc_fc.n.0.0.0...>
0x0010: 0x00 000c caeb 0050 8be5 aca3 dd65 e3e1 ........P.....
0x0020: 002a 002a 1000 0000 0101 080a 94b4 5be2 ...*.*..........
0x0030: 080a 94ad 8745 5420 4745 5420 2f65 7465 ..ET GET /etet
0x0040: 6765 2e68 746d 6c20 4854 5450 2f31 2e30 ge.html HTTP/1.0
0x0050: 0d0a 6874 7470 2d48 6f73 743a 2036 6374 ..http-Host: 6ct
0x0060: 696e 6e3a 62613 6566 7363 0d0a 0d0a 0105 inn:bafs .... 
0x0070: 0100 0003 00 ...
00:00:13.245284 IP 10.0.0.12.http > 10.29.29.60.51947: . ack 59 win 362 <nop,nop,timestamp 238093769 2494023368> in 0tcl/tmm3 <ls=0x0000_4500_00b6_0b1b_4000_0006_ce0a_11d0_04dc_fc.n.0.0.0...>
0x0010: 0x00 000c 4500 00c9 6f68 4000 4006 755d ....E..oh@[email protected]]
0x0020: 0a29 0010 0a2a 0010 0800 0e06 4906 9e90 .)..)..I..
0x0030: 080a 94b4 5be2 080a 94ad 8745 5420 ....E.T
0x0040: 0150 4854 5450 2f31 2e31 2042 6164 2052 .P HTTP/1.1 Bad R
0x0050: 6571 7565 7374 0d0a 436f 6e74 656e 742d equest. Content-
0x0060: 5479 7065 3a20 7465 7874 2f68 746d 6c2d Type: text/html-
0x0070: 6368 6172 7365 743d 6973 6f2d 3838 3539 charset=iso-8859
0x0080: 2d31 0d0a 436f 6e6e 6563 7469 6f6e 3a20 -1. Connection: 
0x0090: 636c 6f73 650d 0a43 6f6e 7465 6e74 2d4c close.Content-L
0x00a0: 656e 6774 683a 2030 0d0a 0d0a 3133 3432 ength: 0..1342
0x00b0: 3639 3638 3537 3634 3337 3438 0d0a 0d0a 696c 6567 616c 2052 6571 7565 7374 2053 4552 illegal Request SER
0x00c0: 5645 5220 4953 2055 500d 0a56 616c 6964 VER IS UP.Valid
0x00d0: 6174 696f 6e20 4661 696c 6564 3064 0a0d ation Failed0d..
The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The correct response should be an HTML page including the string 'SERVER IS UP'. What is the issue?

Options

  • AThe /test_page.html does NOT exist on the web server.
  • BThe server is configured to require authentication.
  • CThe monitor is sending an HTTP/1.0 request and the server expects HTTP/1.1.
  • DThe 'GET /etetge.html' request does not match the actual page location.

Community Discussion

No community discussion yet for this question.

Full 301B Practice