1. In Wireshark, what filter would you use to see only HTTP traffic?

tcp.port == 80tcp.port == 443udp.port == 53http.only

2. Which port is commonly associated with HTTPS (encrypted)?

Port 443Port 80Port 23Port 161

3. What should you do if your browser shows a certificate warning (e.g. domain mismatch or untrusted)?

Stop; you might be talking to an impostor (possible MITM).Click through the warning to continue.Disable HTTPS for that site.Clear all cookies and try again.

4. Which port is commonly associated with unencrypted HTTP?

Port 80Port 443Port 22Port 21

5. What is the main takeaway of the lab regarding HTTP vs HTTPS and MITM?

HTTP sends data in clear text that anyone on-path can read; HTTPS encrypts data so encryption prevents eavesdropping; MITM relies on weak or unencrypted channels.HTTP and HTTPS are equally secure.MITM only affects HTTPS.Encryption is unnecessary on trusted networks.

Threat Landscape Overview : MITM

1. In Wireshark, what filter would you use to see only HTTP traffic?

2. Which port is commonly associated with HTTPS (encrypted)?

3. What should you do if your browser shows a certificate warning (e.g. domain mismatch or untrusted)?

4. Which port is commonly associated with unencrypted HTTP?

5. What is the main takeaway of the lab regarding HTTP vs HTTPS and MITM?