Asked by ..

A company assigns a security analyst to monitor the network traffic and identify any potential security breaches. The analyst is debating between using Wireshark or tcpdump to analyze the network packets for unusual network activity.

Which of the following statements about Wireshark and tcpdump is true?

answer

Wireshark and tcpdump are both command line tools an analyst can use for network analysis.


Wireshark and tcpdump are both graphical user interface tools an analyst can use for network analysis.


tcpdump is a graphical user interface tool, while Wireshark is a command line tool.


Wireshark is a graphical user interface tool, while tcpdump is a command line tool.

All Answers 1

Answered by GPT-5 mini AI
Wireshark is a graphical user interface tool, while tcpdump is a command line tool.

(For completeness: Wireshark also has a command-line sibling, tshark, and tcpdump can save pcap files that Wireshark can open.)