When configuring a long term, forensic packet capture and saving all packets to disk which of the following is not a consideration? A. Total capture storage space B. Individual trace file size C. Real-time packet decodes D. Analyzer location

Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software. When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible? A. Authentication B. Reassociation C. 4-Way Handshake D. Probe Response

Using a portable analyzer you perform a packet capture next to a client STA and you can see that the STA is associated to a BSS. You observe the STA sending packets to the AP and the AP sending packets to the STA. Less the 2% of all packets are retransmissions. You move to capture […]

Which one of the best following is an advantage of using display filters instead of capture-time filters? A. Display filters allow for focused analysis on just the packets of interest B. Once created display filters are reusable for later captures C. Display filters only hide the packets from view and the filtered packets can be […]

Which one of the following should be the first step when troubleshooting a WLAN issue? A. Identify capture locations B. Identify probable causes C. Perform an initial WLAN scan and see if any obvious issues stand out D. Define the problem