Cyber Defense Incident Responder By Mr.B

Steps to Capture Packets in Wireshark...

• Open Wireshark

• Apply Filters

• Analyze Packets

• Select a Network Interface

• View Captured Packets

David is using Wireshark to capture packets. What is his purpose?

• To see who's online

• Analyze and troubleshoot network traffic

• To hack the network

• To remove connected networks

Answer explanation

Wireshark captures packets primarily to analyze and troubleshoot network traffic. It helps network administrators identify issues, monitor performance, and ensure security, making it an essential tool for network management.

During an investigation at a university, an incident response team led by Luna attempts to understand the source of a data breach. Which of the following incident response activities describes this process?

• Analysis

• Lessons learned

• Detection

• Containment

Answer explanation

The process of understanding the source of an incident is referred to as 'Analysis'. This activity involves examining the details of the incident to identify its origins and contributing factors.

Explain what a virtual machine is by considering how Grace uses it to run different operating systems on her computer.

Answer explanation

A virtual machine (VM) is a software emulation of a physical computer that runs an operating system and applications like a real machine, allowing multiple VMs to operate on a single physical host, enhancing resource utilization.

During a cyber attack on a company's network, what role does a Cyber Defense Incident Responder play?

• They only work on Preparation phase of an incident

• They investigate what happened, figure out how to stop it, and work to fix the problem so it doesn't happen again.

• They only detect & analyzed an incident.

• They only work on containing an incident.

Answer explanation

A Cyber Defense Incident Responder investigates incidents, determines their causes, implements solutions to stop them, and ensures they do not recur. This comprehensive approach goes beyond just preparation, detection, or containment.