While the question as shown appears slightly misformatted, this closely resembles the Windows command:
ping -t 192.168.0.101
Here:
-t means to ping continuously until manually stopped.
In the question: ping -* 6 192.168.0.101, the * is most likely a placeholder or typographical error. Based on CEH format questions and how command-line flags work in ping, -t is the correct flag.
Option A. t - Correct (ping continuously)
Why Others Are Incorrect:
B). s: Not a valid option in Windows ping.
C). a: Used to resolve the hostname from an IP (not related to this).
D). n: Specifies the number of echo requests to send.
Reference:
CEH v13 Module 03 - ICMP Tools and Ping Usage
Windows ping command help: ping /?

A Protocol Analyzer is the correct tool used to examine the contents of packet data (often stored in .pcap files) to determine if a particular sequence of traffic is suspicious, malformed, or part of a known exploit.
In CEH v13:
Module 3: Scanning Networks
Module 4: Enumeration
Module 5: Vulnerability Analysis
Related Lab: Packet Analysis using Wireshark
The CEH v13 Study Guide states:
"A protocol analyzer (e.g., Wireshark) captures and decodes packets to display their contents and help analysts understand communication flows and anomalies. It is used to manually inspect packet contents and behavior, which helps distinguish legitimate traffic from attacks." PCAP (Packet Capture) files are typically analyzed using tools like Wireshark. These tools decode protocol layers and show payloads, making it easier for analysts to identify if IDS alerts were accurate or false positives.
Incorrect Options:
B). Network sniffer: General term; protocol analyzer is the specific functional tool used.
C). IPS: Prevents or blocks malicious traffic, but does not analyze existing packet captures.
D). Vulnerability scanner: Identifies vulnerabilities on systems/services; not used for packet capture review.
Reference:CEH v13 Study Guide - Module 3: Scanning Networks, "Using Packet Capture and Protocol Analysis Tools"CEH iLabs: "Network Scanning and Protocol Analysis with Wireshark"

Pharming is a cyberattack technique in which malicious code is used to redirect a website's traffic to a fraudulent or malicious website without the user's knowledge. This redirection typically occurs through:
* DNS poisoning or host file modification
* Exploitation of vulnerabilities in DNS servers or user machines
Pharming aims to collect sensitive data (like usernames, passwords, credit card details) by making users believe they are interacting with a legitimate website when, in fact, they are on a fake one.
As per CEH v13 Official Courseware:
* Pharming is a server-side or client-side attack that manipulates how URLs are resolved.
* It differs from phishing in that it does not rely on fake emails or social engineering but rather on redirecting web traffic via compromised DNS infrastructure or local configuration.
Incorrect Options:
* A. Spimming is the use of spam over instant messaging.
* C. Phishing involves tricking users through fake emails or messages.
* D. Spear-phishing is a targeted version of phishing directed at specific individuals or roles.
Reference - CEH v13 Official Courseware:
Module 09: Social Engineering
Section: "Phishing and Pharming Attacks"
Subsection: "Differences Between Phishing and Pharming"

Dynamic ARP inspection (DAI) protects switching devices against Address Resolution Protocol (ARP) packet spoofing (also known as ARP poisoning or ARP cache poisoning).
DAI inspects ARPs on the LAN and uses the information in the DHCP snooping database on the switch to validate ARP packets and to protect against ARP spoofing. ARP requests and replies are compared against entries in the DHCP snooping database, and filtering decisions are made based on the results of those comparisons. When an attacker tries to use a forged ARP packet to spoof an address, the switch compares the address with entries in the database. If the media access control (MAC) address or IP address in the ARP packet does not match a valid entry in the DHCP snooping database, the packet is dropped.

A Denial of Service (DoS) attack is a type of cyberattack that aims to make a machine or network resource unavailable to its intended users by flooding it with traffic or requests that consume its resources. A TCP SYN flood attack is a type of DoS attack that exploits the TCP handshake process by sending a large number of SYN requests to the target server, without completing the connection. A UDP flood attack is a type of DoS attack that sends a large number of UDP packets to random ports on the target server, forcing it to check for the application listening at that port and reply with an ICMP packet. An ICMP flood attack is a type of DoS attack that sends a large number of ICMP packets, such as ping requests, to the target server, overwhelming its ICMP processing capacity.
The attacker's strategy involves a unique mixture of TCP SYN, UDP, and ICMP floods, using 'r' packets per second. The server can handle 'h' packets per second before it starts showing signs of strain. If 'r' surpasses
'h', it overwhelms the server, causing it to become unresponsive. The attacker selects 'r' as a composite number and 'h' as a prime number, making the attack detection more challenging. This is because prime numbers are less predictable and more difficult to factorize than composite numbers, which may hinder the analysis of the attack pattern.
Considering 'r=2010' and different values for 'h', the scenario that would potentially cause the server to falter is the one where 'h=1987' (prime). This is because 'r' is greater than 'h' by 23 packets per second, which means the server cannot handle the incoming traffic and will eventually run out of resources. The other scenarios would not cause the server to falter, as 'h' is either greater than or very close to 'r', which means the server can either manage or barely cope with the incoming traffic. References:
* What is a denial-of-service (DoS) attack? | Cloudflare
* Denial-of-Service (DoS) Attack: Examples and Common Targets - Investopedia
* DDoS Attack Types: Glossary of Terms
* What is a Denial of Service (DoS) Attack? | Webopedia