In normal operation, a host receiving packets can determine their source by direct examination of the source address field in the:

Question

Options

• AThe IP packet header
• BSource code
• CAudit logs
• DIntrusion Detection System

• A
  72% (34)
• B
  4% (2)
• C
  17% (8)
• D
  6% (3)

Explanation

Option A is correct because every IP packet contains a header with defined fields, including a source IP address field - this is part of the IPv4 and IPv6 protocol specifications, allowing any receiving host to immediately identify where a packet originated without consulting any external system.

Why the distractors are wrong:

• B (Source code): Source code is application software, not a runtime network mechanism - it doesn't contain packet addressing information.
• C (Audit logs): Logs are after-the-fact records that may record traffic but aren't consulted during normal packet receipt to determine origin.
• D (IDS): An Intrusion Detection System analyzes traffic for threats; it's a security tool, not a packet field a host reads to determine source address.

Memory tip: Think "header = metadata." Just as an envelope has a return address printed on it, an IP packet carries its source address inside its own header - no lookup required.

No community discussion yet for this question.