Computer Hacking Forensic Investigator (CHFI v10) — Question 142

What does the 63.78.199.4(161) denotes in a Cisco router log?
Mar 14 22:57:53.425 EST: %SEC-6-IPACCESSLOGP: list internet-inbound denied udp 66.56.16.77(1029) -> 63.78.199.4(161), 1 packet

Answer options

• A. Destination IP address
• B. Source IP address
• C. Login IP address
• D. None of the above

Correct answer: A

Explanation

The notation 63.78.199.4(161) indicates the destination IP address and port number in the log entry. The source IP address is 66.56.16.77(1029), which is listed before the arrow. Therefore, options B, C, and D are incorrect.