Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
Exam
: Network General Corp
1T6-540
Title
: Advanced Troubleshooting
with InfiniStream Network
Mgmt
Version : Demo
Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
1. Applications that use ephemeral ports on both sides of a connection are difficult to mine, because:
A. The ephemeral ports cannot be predicted
B. They all use the same port, TCP/1024
C. The well-known ports cannot be predicted
D. The ephemeral ports can be predicted but the port pairings are always different
Answer: A
2. Mining FTP frames for both the Control and Data connections is difficult, because:
A. The server listens on TCP/20 and on ephemeral addresses that are difficult to predict.
B. The server listens on TCP/21 and multiple addresses that cannot be predicted.
C. The server listens on TCP/21 and ephemeral ports that are difficult to predict.
D. Many implementations of FTP exist that use varying well-known ports.
Answer: C
3. Which of the following is NOT typically associated with network security auditing?
A. Inspection of passwords
B. Examining a network for signs of misuse
C. Troubleshooting network application efficiency
D. Looking for conformance to policy
Answer: C
4. Consider this illustration of a data mining filter. What is wrong with it?
A. The filter only allows packets that are sent to HTTP servers on their well-known port.
It would only show
commands without replies. This filter is incomplete.
B. The filter only allows packets that are both to and from the well-known port TCP/80 (HTTP). Both
source and destination port cannot be 80. Nothing would pass the filter.
C. It would also allow UDP packets to and from port 80 (HTTP), which does not make sense, since HTTP is
a TCP-based protocol.
D. Nothing.
It will capture normal data to and from TCP/80 (HTTP) servers.
Answer: B
5. The easiest way to identify data for further analysis is to _______.
A. create an alias
Exam1pass
Easiest wa