CDFE Practice Questions - PECB Certified Digital Forensics Examiner (CDFE) Exam

An examiner wants to isolate only DNS queries in a large capture using Wireshark. Which display filter expression accomplishes this?

tcp.port == 53 dns ip.proto == 53 udp contains dns

dns

Access more questions from this quiz

Continue to CDFE Practice Questions - PECB Certified Digital Forensics Examiner (CDFE) Exam for more practice questions and the full quiz experience.