[Solved] A network forensics tool logs the following: Source IP: 10.0.0.5, Destination IP: 172.16.0.8, Protocol: TCP, Port: 80What does this log most likely represent? | Cybersecurity

Cybersecurity - Digital Forensics

A network forensics tool logs the following:
Source IP: 10.0.0.5, Destination IP: 172.16.0.8, Protocol: TCP, Port: 80
What does this log most likely represent?

AA web browsing session

BAn email being sent

CA file transfer using FTP

DA DNS query

Step-by-Step Solution

Solution:

Step 1: Identify protocol and port meaning
TCP on port 80 is commonly used for HTTP, which is web browsing.
Step 2: Match log to activity
Since port 80 is HTTP, the log indicates a web browsing session, not email, FTP, or DNS.
Final Answer:
A web browsing session -> Option A
Quick Check:
Port 80 + TCP = Web browsing [OK]

Quick Trick: Port 80 TCP traffic usually means web browsing [OK]

Common Mistakes:

MISTAKES

Confusing port 80 with email ports
Mixing FTP with HTTP ports
Assuming DNS uses TCP port 80

Master "Digital Forensics" in Cybersecurity

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More Cybersecurity Quizzes

A network forensics tool logs the following:

Step 1: Identify protocol and port meaning

Step 2: Match log to activity

Final Answer:

Quick Check:

Want More Practice?