nerdexam
EC-Council

312-49 · Question #112

Determine the message length from following hex viewer record:

The correct answer is D. 810D. In a hex viewer record, the message length field is typically found at a specific offset in the protocol header and is represented as a multi-byte hexadecimal value. The correct answer is 810D, which represents the raw hex bytes encoding the total message length as found in the…

Submitted by amina.ke· Apr 18, 2026Network Forensics

Question

Determine the message length from following hex viewer record:

Exhibit

312-49 question #112 exhibit

Options

  • A6E2F
  • B13
  • C27
  • D810D

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    3% (1)
  • C
    9% (3)
  • D
    74% (26)

Explanation

In a hex viewer record, the message length field is typically found at a specific offset in the protocol header and is represented as a multi-byte hexadecimal value. The correct answer is 810D, which represents the raw hex bytes encoding the total message length as found in the header of the captured packet or record. The other options (6E2F, 13, 27) correspond to other fields or offsets within the hex dump, not the message length field.

Topics

#Hexadecimal#Network Packet Analysis#Protocol Headers

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice