212-82 practice question 1 of 10

An loT device placed in a hospital for safety measures has sent an alert to the server. The network traffic has been captured and stored in the Documents folder of the "Attacker Machine-1". Analyze the loTdeviceTraffic.pcapng file and identify the command the loT device sent over the network. (Practical Question)

Full set: 159 questions

Domain Computer Forensics Fundamentals

Answer options
A: Tempe_Low
B: Low_Tem p e
C: High_Tcmpe
D: Temp_High Correct answer
Correct Answer:
D. Temp_High
Explanation

The IoT hospital safety device sent an alert over the network, and the command corresponding to a high-temperature alert is “TempHigh.” Among the options, this is the only correctly ordered and correctly spelled command string. The other options either describe low temperature or contain spelling/order errors inconsistent with the expected alert command.

Why Incorrect

A. TempeLow — Indicates a low-temperature condition and contains an incorrect command form.
B. LowTem p e — Malformed spacing/order; it does not match the expected command string.
C. HighTcmpe — Contains a spelling error and does not match the command format.

References

- Wireshark User’s Guide, section “Packet Bytes Pane”: explains viewing captured packet payload data in hexadecimal and ASCII.

- Wireshark User’s Guide, section “Finding Packets”: describes searching packet contents for strings/bytes in captured traffic.

- IETF, “PCAP Next Generation Dump File Format,” Enhanced Packet Block section: describes how pcapng files store captured packet data for analysis.

Scroll to Top