N10-009 · Question #215
A network administrator is troubleshooting an application issue after a firewall change. The administrator has confirmed that the port and protocol are accessible to the user, but the application is…
The correct answer is B. tcpdump. tcpdump is a command-line packet analyzer that can capture and display network traffic, enabling inspection of data at the application layer of the OSI model.
Question
A network administrator is troubleshooting an application issue after a firewall change. The administrator has confirmed that the port and protocol are accessible to the user, but the application is still having issues. Which of the following tools allows the administrator to look at traffic on the application layer of the OSI model?
Options
- Aifconfig
- Btcpdump
- Cnslookup
- Dtraceroute
How the community answered
(22 responses)- A14% (3)
- B73% (16)
- C5% (1)
- D9% (2)
Why each option
tcpdump is a command-line packet analyzer that can capture and display network traffic, enabling inspection of data at the application layer of the OSI model.
ifconfig (or ip addr) is used to display and configure network interface parameters like IP addresses and MAC addresses, not to capture or analyze network traffic content.
tcpdump is a powerful command-line packet sniffing tool that captures and displays network packets. It allows an administrator to analyze packet headers and payloads, providing detailed insight into communication at various OSI layers, including the application layer, to diagnose application-specific issues.
nslookup is a command-line tool used for querying the Domain Name System (DNS) to obtain domain name or IP address mapping information, not for inspecting application layer traffic.
traceroute maps the route a packet takes to reach a destination, showing the IP addresses of intermediate routers, but it does not provide insight into the application layer content of the traffic.
Concept tested: Network troubleshooting tools (tcpdump)
Source: https://www.tcpdump.org/
Community Discussion
No community discussion yet for this question.