nerdexam
Microsoft

70-649 · Question #35

70-649 Question #35: Real Exam Question with Answer & Explanation

The correct answer is D. Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.. See the full explanation below for the reasoning.

Question

You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24 hours. You save the capture file as data.cap. You find that the size of the file is more than 1 GB. You need to create a file named DNSdata.cap from the existing capture file that contains only DNS-related data. What should you do?

Options

  • AApply the display filter DNS and save the displayed frames as a DNSdata.cap file.
  • BApply the capture filter DNS and save the displayed frames as a DNSdata.cap file.
  • CAdd a new alias named DNS to the aliases table and save the file as DNSdata.cap.
  • DRun the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.

Community Discussion

No community discussion yet for this question.

Full 70-649 Practice