An analyst uses Wireshark to capture traffic and sees a TCP segment with SYN, SYN-ACK, and ACK packets. At which layer does the TCP three-way handshake occur?
- A.Layer 2
- B.Layer 3
- C.Layer 7
- D.Layer 4
Why D is correct
TCP is a Layer 4 (Transport) protocol. The three-way handshake (SYN from client, SYN-ACK from server, ACK from client) establishes a TCP connection at the transport layer before any application data is exchanged.
Know someone studying for Network Fundamentals? Send them this one.