Refer to the exhibit. A network administrator is viewing some output on the Netflow collector. What can be determined from the output of the traffic flow shown?
- This is a TCP DNS response to a client machine.
- This is a UDP DNS response to a client machine.
- This is a UDP DNS request to a DNS server.
- This is a TCP DNS request to a DNS server.
| Answers Explanation & Hints:
The traffic flow shown has a source port of 53 and a destination port of 1025. Port 53 is used for DNS and because the source port is 53, this traffic is responding to a client machine from a DNS server. The IP PROTOCOL is 17 and specifies that UDP is being used and the TCP flag is set to 0. |