Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

  1. Home
  2. Protocol Analysis
  3. Wireshark
  4. WCNA
  5. Wireshark Certified Network Analyst Practice Exam Questions and Answers

WCNA Wireshark Certified Network Analyst Practice Exam Questions and Answers

Questions 4

Null scans use legal TCP packet formats, but listen for illegally-formed TCP response packets.

Options:

A.

True

B.

False

Buy Now
Questions 5

You have opened a trace file that has been sent to you and you noticed the timestamp only offers millisecond-level time values. You can enable Wireshark to add the microsecond detail information to these packets.

Options:

A.

True

B.

False

Buy Now
Questions 6

Which transport is used for multicast and broadcast traffic?

Options:

A.

TCP

B.

UDP

C.

ICMP

D.

ARP

Buy Now
Questions 7

What is the maximum MAC Service Data Unit (MSDU) size defined by the IEEE 802.11 specification?

Options:

A.

1518 bytes

B.

2304 bytes

C.

2312 bytes

D.

4096 bytes

Buy Now
Questions 8

The gratuitous ARP process is not required if a host is configured with a static IP address.

Options:

A.

True

B.

False

Buy Now
Questions 9

The capture and display filter syntax for TCP communications is tcp.

Options:

A.

True

B.

False

Buy Now
Questions 10

How do you quickly spot large gaps in time between packets in a trace file containing 6,000 packets?

Options:

A.

Open and examine Wireshark's Expert Infos window.

B.

Look for packets colorized based on Wireshark's default coloring rule for high delta times.

C.

Set the Time column to Seconds Since Beginning o f Capture and scroll through the trace file.

D.

Set the Time column to Seconds Since Previously Displayed Packet and sort the Time column.

Buy Now
Questions 11

How can you quickly Identify all WLAN BSSIDs seen In a trace file?

Options:

A.

filter on wlan.bssid.id

B.

sort on the MAC header type

C.

open Statistics | Summary

D.

open Statistics | WLAN Traffic

Buy Now
Questions 12

All packets that contain UDP or TCP headers are counted in the IP Protocol Types statistic.

Options:

A.

True

B.

False

Buy Now
Questions 13

Which statement about ICMP is true?

Options:

A.

Port filtering can block ICMP traffic.

B.

ICMP packets cannot cross a router.

C.

All ICMP packets are the same length.

D.

ICMP packets do not contain a UDP or TCP header.

Buy Now
Questions 14

DNS responses contain four sections: Question, Answer RR, Authority RR and Additional RR.

Options:

A.

True

B.

False

Buy Now
Questions 15

Wireshark can capture traffic on an interface even if that interface is not listed on the Start Page.

Options:

A.

True

B.

False

Buy Now
Questions 16

How do you determine which Profile is in use while you are capturing traffic?

Options:

A.

Examine the Wireshark Title Bar.

B.

Look in the Status Bar Profile column.

C.

Right-click on the Packet Summary pane.

D.

Open the Preferences | Interface information.

Buy Now
Questions 17

WCNA Question 17

This is a DNS inverse query packet used to resolve an IP address to a host name.

Options:

A.

True

B.

False

Buy Now
Questions 18

Session Initiation Protocol (SIP) is a protocol that can be used to carry voice data.

Options:

A.

True

B.

False

Buy Now
Questions 19

DHCP is based on BOOTP.

Options:

A.

True

B.

False

Buy Now
Questions 20

WCNA Question 20

Which statement about this color rule is correct?

Options:

A.

This color rule will generate a syntax error.

B.

This color rule will be saved in the Branch Office #1 profile.

C.

This color rule must be placed under all other TCP color filters.

D.

This color rule is based on the Berkeley Packet Filter (BPF) format.

Buy Now
Questions 21

To increase the number of recently created display filters that Wireshark remembers, increase the Filter display max, list entries value in Wireshark's Preferences window.

Options:

A.

True

B.

False

Buy Now
Questions 22

WCNA Question 22

Which statement about this packet is correct?

Options:

A.

The source and destination hosts support window scaling.

B.

This packet is establishing window scaling between the two TCP hosts.

C.

The Window Size field value indicates that no additional data can be received by 10.0.52.164.

D.

The Sequence Number field value is too low to allow additional data segments to be received by 10.0.52.164.

Buy Now
Questions 23

Network analysis is often considered 'electronic surveillance' or 'wiretapping* and may be illegal.

Options:

A.

True

B.

False

Buy Now
Questions 24

Wireshark contains numerous pre-defined columns that can be added easily to the Packet List pane.

Options:

A.

True

B.

False

Buy Now
Questions 25

Applications may override the default port value defined in the TCP/IP stack services file.

Options:

A.

True

B.

False

Buy Now
Questions 26

Which function provides host name-to-IP address resolution services?

Options:

A.

ARP

B.

DNS

C.

ICMP

D.

SNMP

Buy Now
Questions 27

When you apply a display filter, the Status Bar indicates the total number of packets captured and the packets displayed.

Options:

A.

True

B.

False

Buy Now
Questions 28

Time reference packets are permanently given a timestamp of 00:00:00. When you close and reopen the trace file the time reference information is retained.

Options:

A.

True

B.

False

Buy Now
Questions 29

WCNA Question 29

Which statement about this TCP stream is correct?

Options:

A.

The HTTP client requested a graphic file.

B.

The HTTP server did not understand the client's request.

C.

The HTTP server refused the client's TCP connection attempt.

D.

The HTTP client sent an HTTP GET request to the HTTP server.

Buy Now
Questions 30

WCNA Question 30

Which statement about this HTTP packet is correct?

Options:

A.

This packet was sent from an HTTP server.

B.

The packet contains a request for a graphic file.

C.

This packet contains an invalid HTTP Request Method.

D.

This packet indicates an HTTP client is browsing www.wiresharktraining.com.

Buy Now
Exam Code: WCNA
Exam Name: Wireshark Certified Network Analyst Practice Exam
Last Update: Apr 30, 2026
Questions: 100

PDF + Testing Engine

$63.52  $181.49
buy now WCNA pdf + testing engine

Testing Engine

$50.57  $144.49
buy now WCNA testing engine

PDF (Q&A)

$43.57  $124.49
buy now WCNA pdf