Skip to content

CS KAIROS · LEARNING LIBRARY

M08 · Sniffing · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m08-visibility-q1 · Original practice

What follows directly from TLS packet sizes and timing?

JavaScript is off: read the answer and explanation

C

No decryption or endpoint evidence is provided.
Size does not uniquely determine content.
These are directly observed metadata.
Encryption does not establish trustworthy intent.

ceh-m08-visibility-q2 · Original practice

A capture lacks a particular packet. What is the best initial statement?

JavaScript is off: read the answer and explanation

B

Capture scope does not cover every location.
This preserves limits from location, filtering and loss.
Several causes can explain the absence.
No evidence supports that attack claim.

Continue to safe practice →