Questions

1. How can PCAP files be opened in Wireshark? (Select two.)
   1. Using the File | Open menu option
   2. Using the File | Import from Hex Dump…​ menu option
   3. Using the File | Open | Filetype libpcap menu option
   4. Dragging and dropping the PCAP file into Wireshark
2. What would be the value given in the Wireshark Packet bytes pane for port 80 (HTTP)?
   1. 0050
   2. 0080
   3. ---P
   4. 80
3. What is the content type of a .exe file extracted from an HTTP stream in Wireshark?
   1. application/octet-stream
   2. application/exe
   3. application/pe
   4. executable/microsoft-exe
4. An administrator is checking the registry for suspected malware. Which entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BasicDisplay might be an expected normal value for this system service?
   1. ImagePath = \SystemRoot\Program Files\system.exe
   2. ImagePath = \SystemRoot\.system32\BasicDisplay.exe
   3. ImagePath = \SystemRoot\System32\drivers...