Wireshark D5 V3 - HTTP analysisDNS analysis

The video tutorial explains how DNS communicates over networks using UDP and TCP ports, detailing the structure of DNS packets, including headers and flags. It covers common DNS records and the significance of various flags and codes. The tutorial also demonstrates using Wireshark to analyze DNS traffic, showing how to capture and filter DNS queries and responses.

Which port does DNS use for requests?

• TCP Port 80

• TCP Port 53

• UDP Port 80

• UDP Port 53

What is the purpose of the transaction ID in a DNS packet?

• To encrypt the DNS data

• To track the query and response

• To specify the DNS record type

• To identify the DNS server

What does the QR flag indicate in a DNS message?

• Whether the message is a query or a response

• The DNS server's IP address

• The type of DNS record

• The time-to-live value

What does the AA flag signify in a DNS response?

• The response is truncated

• The response is from an authoritative server

• The response is recursive

• The response is from a non-authoritative server

What is the role of recursion in DNS queries?

• To encrypt the DNS query

• To cache the query result indefinitely

• To forward the query to another server for resolution

• To provide a direct answer from the queried server

In Wireshark, how can you filter DNS traffic?

• By typing 'HTTP' in the filter

• By typing 'DNS' in the filter

• By typing 'TCP' in the filter

• By typing 'UDP' in the filter

What information does the 'Time to Live' (TTL) field provide in a DNS response?

• The duration the response can be cached

• The time the query was made

• The server's uptime

• The DNS record type