nerdexam
CompTIA

SY0-301 · Question #608

Which of the following software allows a network administrator to inspect the protocol header in order to troubleshoot network issues?

The correct answer is C. Packet sniffer. A packet sniffer captures and inspects protocol headers and payload data at the packet level to assist with network troubleshooting.

Security operations

Question

Which of the following software allows a network administrator to inspect the protocol header in order to troubleshoot network issues?

Options

  • AURL filter
  • BSpam filter
  • CPacket sniffer
  • DSwitch

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    91% (29)

Why each option

A packet sniffer captures and inspects protocol headers and payload data at the packet level to assist with network troubleshooting.

AURL filter

A URL filter is a content-filtering tool that blocks access to websites based on URL categories and does not inspect raw protocol headers.

BSpam filter

A spam filter analyzes email content to identify and block unwanted messages and is unrelated to protocol header inspection.

CPacket snifferCorrect

A packet sniffer (such as Wireshark or tcpdump) captures network traffic and decodes protocol headers at each layer, allowing a network administrator to inspect fields like source/destination IP, TCP flags, port numbers, and application-layer data. This detailed visibility into protocol headers is essential for diagnosing connectivity issues, misconfigurations, and performance problems on a network.

DSwitch

A switch is a Layer 2 network device that forwards frames between ports and does not provide protocol header inspection or troubleshooting visibility.

Concept tested: Packet sniffer for protocol header inspection and troubleshooting

Source: https://www.wireshark.org/docs/wsug_html_chunked/

Topics

#packet sniffer#protocol header#network troubleshooting#network monitoring

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice