Month End Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Exam CS0-003 All Questions
Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam

CompTIA CySA+ CS0-003 Question # 75 Topic 8 Discussion

CS0-003 Exam Topic 8 Question 75 Discussion:
Question #: 75
Topic #: 8

A security analyst is reviewing a packet capture in Wireshark that contains an FTP session from a potentially compromised machine. The analyst sets the following display filter: ftp. The analyst can see there are several RETR requests with 226 Transfer complete responses, but the packet list pane is not showing the packets containing the file transfer itself. Which of the following can the analyst perform to see the entire contents of the downloaded files?


A.

Change the display filter to f cp. accive. pore


B.

Change the display filter to tcg.port=20


C.

Change the display filter to f cp-daca and follow the TCP streams


D.

Navigate to the File menu and select FTP from the Export objects option


Get Premium CS0-003 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.