Which tool provides a graphical front-end and integrated sorting and filtering options?

• A. tcpdump is the tool that provides a graphical front-end.
• B. Cloud-based detection tool
• C. Wireshark provides a graphical front-end and integrated sorting and filtering options.
• D. NTP provides GUI for network time protocol.

Answer: (C)

In network analysis, you want a tool that gives you a visual view of traffic and lets you quickly find the packets you care about. Wireshark provides exactly that: a graphical front-end that lets you view captured traffic and interact with it in real time. It shows a packet list with columns like Time, Source, Destination, Protocol, and Length that you can sort by clicking headers, and it includes a powerful display filter bar to narrow down what you’re looking at (for example, filtering by a specific IP address or port). It also decodes each packet into human-readable protocol fields, making it easier to understand what's happening on the wire.

tcpdump, by contrast, is primarily a command-line tool that prints packet data to the terminal, so while it’s highly capable, it doesn’t provide an interactive GUI with integrated sorting and filtering. The other options aren’t specific tools for packet capture and analysis with a GUI, so they don’t fit the scenario.