Answer :
Final answer:
To detect applications sending passwords in cleartext to a REST API at 10.1.2.3, the Wireshark filter to apply is http.request.method=="POST" && ip.dst==10.1.2.3, which identifies HTTP POST requests to the specified IP address. Option b is the answer.
Explanation:
To detect applications that send passwords in cleartext to a REST API located at the IP address 10.1.2.3 using Wireshark, you should apply a filter that looks for HTTP POST requests to that specific IP address. This is because passwords are typically sent to REST APIs via POST requests. Therefore, the most appropriate Wireshark filter from the provided options would be:
http.request.method=="POST" && ip.dst==10.1.2.3
This filter looks for packets that use the HTTP POST method (which are likely to contain body data such as passwords) and are destined for the IP address 10.1.2.3. Using this filter in Wireshark will help you inspect packets that could potentially contain unencrypted sensitive information such as passwords.
