Question 718 of 730 from exam SY0-601: CompTIA Security+

Question 718 of 730 from exam SY0-601: CompTIA Security+

Prev Question Next Question

Question

A user reports constant lag and performance issues with the wireless network when working at a local coffee shop.

A security analyst walks the user through an installation of Wireshark and gets a five-minute pcap to analyze.

The analyst observes the following output:

No
1234

1235

1236

Time
9.1195665

9.1265649

9.2223212

Source

Sagemcom_87:9£:a3

Sagemcom_87: 9:

Sagemcom_87:9:

3

Destination Protocol

Broadcast

Broadcast

Broadcast

802.11

802.11

802.41

Length
38

39

38

Info
Deauthentication,
SN=655, FN:
Deauthentication,
SN=655, EW:
Deauthentication,
SN=657, FN=

Which of the following attacks does the analyst MOST likely see in this packet capture?

A.

Session replay B.

Evil twin C.

Bluejacking D.

ARP poisoning.

B.

Explanations

A user reports constant lag and performance issues with the wireless network when working at a local coffee shop.

A security analyst walks the user through an installation of Wireshark and gets a five-minute pcap to analyze.

The analyst observes the following output:

No
1234

1235

1236

Time
9.1195665

9.1265649

9.2223212

Source

Sagemcom_87:9£:a3

Sagemcom_87: 9:

Sagemcom_87:9:

3

Destination Protocol

Broadcast

Broadcast

Broadcast

802.11

802.11

802.41

Length
38

39

38

Info
Deauthentication,
SN=655, FN:
Deauthentication,
SN=655, EW:
Deauthentication,
SN=657, FN=

Which of the following attacks does the analyst MOST likely see in this packet capture?

A.

Session replay

B.

Evil twin

C.

Bluejacking

D.

ARP poisoning.

B.