Wireshark Certified Network Analyst WCNA Study Guides

test2023-01-31T06:13:47+00:00

With the increasing demand for network professionals, the WCNA certification is becoming more important for those looking to advance their careers in the field. To help candidates prepare for the WCNA exam, we have created a set of Wireshark Certified Network Analyst WCNA Study Guides to provide a comprehensive and effective study tool. Wireshark Certified Network Analyst WCNA Study Guides are easy to use and can be accessed online at any time, making them a convenient and flexible study resource. They can be used to test your knowledge and identify areas that require further study, helping you to focus your efforts where they are needed the most.

Page 1 of 6

1. Which method is used by Wireshark to detect TCP re-transmission?

Sequence and Acknowledgment Numbers

Windows size shifts

Delta time delay

Hop counts

2. Which item can be saved with a Wireshark profile?

Services file

Editcap scripts

Preference settings

Most recent IO Graph settings

3. Which transport layer protocol is used for multicast traffic?

ARP

TCP

UDP

ICMP

4. Which SIP response is represented by 6xx?

Global failures

Request failures

Success responses

Redirection responses

5. How do you determine which Profile is in use while you are capturing traffic?

Examine the Wireshark Title Bar

Open and examine Preference/Interface

Examine the Profile column in the Status Bar

Expand and Examine the frame information

6. What is the transport layer protocol and port used by Telnet?

TCP 100

UDP 23

UDP 25

TCP 23

7. Where can you find this information in Wireshark which is shown in below image?

TCP Stream Graphs

Expert Information

Colorize Packet List

Colorize conversation

8. Choose a troubleshooting task performed by a Network Analyst?

Analysis

Verifying the configuration

Upgrade system networks

All of the above

9. This is a key parameter for TraceRoute, Identify this parameter.

DSCP

TTL

Flags

None of the above

10. How many handshakes are involved while establishing a TCP connection?

Page 2 of 6

11. Its not an application layer protocol, Identify this protocol.

TCP

SMTP

FTP

HTTPS

12. Which Wireshark element can be created using the display filter syntax?

ACL rules

Capture filters

Coloring rules

Reference packets

13. Identify a correct statement for the packet shown in below image.

This packet is establishing window scaling between the two TCP hosts.

The Sequence Number field value is too low to allow additional data segments to be received by 10.0.52.164.

The Window Size field value indicates that no additional data can be received by 10.0.52.164.

The source and destination hosts support window scaling.

14. Which communication can be used by a host to dynamically join a multicast group?

Multicast DNS (mDNS)

Open Shortest Path First (OSPF)

Protocol Independent Multicast (PIM)

Internet Group Management Protocol (IGMP)

15. What size of address space is supported by IPv6?

32 Bit

64 Bit

128 Bit

100 Bit

16. Ping is related to which protocol?

DHCP

ICMP

FTP

TCP

17. Which statement about the DNS packet shown below is correct?

This is an inverse DNS query

This is a DNS response packet

This DNS packet indicates that a domain name could not be resolved

This is a request to resolve the IP address 2.26.64.24

18. Which traffic type may be seen when you connect Wireshark directly to a switch without configuring port spanning or port mirroring?

Broadcast traffic

Noise and Interference

DNS queries from all hosts

Frames that contain CRC errors

19. Which capture mode can be used to limit the maximum disk usage by keeping the latest captured data?

Single temporary file

Single named file

Multiple files, continuous

Multiple files, ring buffer

20. What is the HTTP error code for ‘forbidden’?

400

500

403

402

Page 3 of 6

21. What is the purpose of a DNS CNAME?

Define an alias name

Offers inverse DNS information

Generates a common name as a DNS host name

Indicates multiple IP addresses are contained in a DNS response

22. Select the correct display filter syntax to filter IP packets consisting of ICMP Protocol.

ip.proto==1

ip.protocol==6

ip.proto==4

ip.protocol==5

23. After how many gigabytes a new capture file is created as per below image

157.876

.157876

157876

1.57876

24. Below image has packet details for a TCP packet with basic header and without any optional fields.

True

False

25. Identify a correct statement related to TCP recovery process.

Re-transmitted packets use the same sequence number as the original lost packet.

The window size field is used in the packet loss recovery process.

TCP hosts attempt three re-transmissions before terminating the connection.

Packet loss recovery is always started by the client.

26. What's the terminal based Wireshark called?

Webshark

Terminalshark

Dshark

Tshark

27. This protocol is used to send a destination network unknown message back to originating hosts, Identify this Protocol.

DHCP

ICMP

TCP

FTP

28. This TCP Round Trip Time graph indicates the highest round trip latency time seen in this trace file is 1 millisecond.

True

False

29. Why can't ARP packets be routed?

All ARP packets are IP broadcasts

ARP packets do not have an IP header

ARP packets have a Time to Live value of 0

ARP packets are smaller than the minimum packet size allowed

30. UDP is a three-way handshake protocol

True

False

Page 4 of 6

31. Which of the following attributes does not belong to TCP?

Rearranges data packets in the order specified

Flow Control

Used by VOIP

Error checking and error recovery

32. How many layers are there in TCP/IP model?

33. Referring to packet list in below image, find out how two images got downloaded from the web site?

Serially

Parallelly

Both A & B

None of the above

34. Identify this Logical Operator '^^'

Logical OR

Logical XOR

Logical AND

Not (Negation)

35. This capture mode allows setting interface to capture all packets on a network segment to which it is associated to, Identify this capture mode.

Monitor mode

Promiscuous mode

Ring Buffer mode

None of the above

36. What is the keyboard shortcut to start/stop capturing in Wireshark?

Ctrl + C

Ctrl + S

Ctrl + E

Ctrl + D

37. What is the type of IP addresses in the below image?

IPv4

IPv6

IPv4 & IPv6 mixed

None of the above

38. What is the Protocol Number for UDP in hexadecimal notation?

0x01

0x11

0x06

0x02

39. What are unassigned IP addresses also called?

Dark addresses

Dim IP addresses

Black IP addresses

Unlighted IP addresses

40. Below image has a packet related to a SSL transaction, what can be source in this packet?

Server

Client

Both A & B

None of the above

Page 5 of 6

41. Wireshark can be used to modify packets.

True

False

42. Specify the count of Bytes for an unknown protocol from the below image.

201

304

15495

43. A custom column can be added to and rearranged in the Packet List pane.

True

False

44. Which format is used by capture filters?

editcap format

libpcap format

color filter format

Berkeley Packet Filtering (BPF) format

45. Which file contains the TCP Expert information?

Services

libpcap

packet-tcp.c

Coloring rules

46. Wireshark can display CRC error in a packet.

True

False

47. What is the purpose of Transaction ID field in a DHCP packet?

Helps to obtain an IP address

Confirms the availability of a DHCP server

Used by client to accept DHCP offer

Transaction ID helps the client and server to be part of same conversation.

48. Select a transport layer protocol.

dynamic host configuration protocol

stream control transmission protocol

neighbor discovery protocol

internet control message protocol

49. Identify the capture filter for ipv4 address 192.168.0.104

ip == 192.168.0.104

ip.dst == 192.168.0.104

host 192.168.0.104

ip6 192.168.0.104

50. Which link should be tapped to access and monitor a network?

Link between two routers

Link between routers and monitoring probe

Link between switch and Network Packet Broker

Link between two monitoring probes

Page 6 of 6

51. Where can we do protocol specific settings in Wireshark?

Preferences

Configuration Profiles

Protocol Hierarchy

Conversations