LPIC-2 Advanced Networking Configuration Practice Question
Exhibit
Refer to the exhibit. Output of 'tcpdump -i eth0 -n' on a server: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes 18:34:22.123456 IP 10.0.0.1 > 10.0.0.2: ICMP echo request, id 1, seq 1, length 64 18:34:22.123789 IP 10.0.0.2 > 10.0.0.1: ICMP echo reply, id 1, seq 1, length 64 18:34:23.124456 IP 10.0.0.1.54321 > 10.0.0.3.80: Flags [S], seq 123456, win 65535, options [mss 1460], length 0 18:34:23.125001 IP 10.0.0.3.80 > 10.0.0.1.54321: Flags [S.], seq 654321, ack 123457, win 65535, options [mss 1460], length 0 18:34:23.125200 IP 10.0.0.1.54321 > 10.0.0.3.80: Flags [.], ack 654322, win 65535, length 0
Based on a network capture that shows a TCP connection to port 80 between 10.0.0.1 and 10.0.0.3, which of the following statements is correct?
⚠ Common exam trap
It's easy for candidates to assume only one statement is correct, but the question is designed so that all three individual statements (A, C, D) are true, making 'All of the above' the only comprehensive answer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
All of the above
Based on the capture (which shows a TCP connection to port 80), the three-way handshake (SYN, SYN-ACK, ACK) is used, the client 10.0.0.1 uses a random high ephemeral port, and the server 10.0.0.3 responds on port 80, indicating an HTTP server. Thus, all three statements (A, C, D) are true, making 'All of the above' correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The three-way handshake is complete for a TCP connection
Why it's wrong here
True, but not the only correct statement.
- ✓
All of the above
Why this is correct
All three statements are correct based on the capture.
- ✗
The client is using a random high port
Why it's wrong here
True, but not the only correct statement.
- ✗
The server 10.0.0.3 is running an HTTP server
Why it's wrong here
True, but not the only correct statement.
Visual reference
Go deeper
Related to this question
About these practice questions
This LPIC-2 question is part of Courseiva's 507-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.