Course: Elastic Security for SIEM
Do I need to pass 100% of the CTFd challenges to get a course completed? There are a few challenges that I just can't get right. For example: 5.3 Lens / 1 Destination port.
I do what I think has been asked and the answer that I get from Lens is incorrect (see picture below). I know what the right answer is (I was able to guess it) - but I can't figure out how to get the the correct answer using the tool. It could be that I don't understand the question correctly. I have a few other challenges where I think I'm doing what is being asked but my answers are wrong and it is very frustrating that I can't get a course completed because I can't figure out what the challenge requires.
Similar challenges are the two challenges following this one, 2 record count and 3 summary data. I can't get them right because something is wrong with my search even though to my understanding it should be correct.