A company is experiencing a denial of service attack and wants to identify the source IP address of the attacker in real time. Which method is the BEST way to accomplish this?

The correct answer is A. Network sniffer. A network sniffer (packet analyzer) such as Wireshark captures and inspects network traffic in real time, allowing a technician to see the source IP addresses of incoming packets during an active attack. This is the most direct and immediate method for identifying an attacker's…

Network security

Question

Options

ANetwork sniffer
BSyslog
CSNMPv3
DSystem logs

How the community answered

(27 responses)

A
70% (19)
B
7% (2)
C
7% (2)
D
15% (4)

Explanation

A network sniffer (packet analyzer) such as Wireshark captures and inspects network traffic in real time, allowing a technician to see the source IP addresses of incoming packets during an active attack. This is the most direct and immediate method for identifying an attacker's IP during a live DoS event. Syslog collects log messages from devices but is not designed for real-time packet-level traffic inspection. SNMPv3 is a network management protocol used for monitoring device statistics and configuration-not for capturing live packet data. System logs record OS and application events but typically do not capture raw network traffic with source IP detail in real time.

Topics

#DoS attack#network sniffer#packet capture#traffic analysis

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice