GAQM Certified Professional Ethical Hacker (CPEH) CPEH-001 Question # 31 Topic 4 Discussion

GAQM Certified Professional Ethical Hacker (CPEH) CPEH-001 Question # 31 Topic 4 Discussion

CPEH-001 Exam Topic 4 Question 31 Discussion:
Question #: 31
Topic #: 4

You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine.

What wireshark filter will show the connections from the snort machine to kiwi syslog machine?


A.

tcp.dstport==514 && ip.dst==192.168.0.150


B.

tcp.srcport==514 && ip.src==192.168.0.99


C.

tcp.dstport==514 && ip.dst==192.168.0.0/16


D.

tcp.srcport==514 && ip.src==192.168.150


Get Premium CPEH-001 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.