Protocol Analysis Wireshark Certified Network Analyst Practice - WCNA Exam Practice Test
This packet shows the expanded TCP flags area. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identicalfiltering results.
Correct Answer: A
Time reference packets are permanently given a timestamp of 00:00:00. When you close and reopen the trace filethe time reference information is retained.
Correct Answer: B
How do you determine which Profile is in use while you are capturing traffic?
Correct Answer: B
Window scaling is established during the TCP handshake process to enable hosts to use larger window sizes than is 65,535.
Correct Answer: A
You can force Wireshark to temporarily dissect traffic to and fromport 18067 as IRC traffic using the Decode As function.
Correct Answer: A
This is a DNS inverse query packet used to resolve an IP address to a host name.
Correct Answer: B
DNS can onlyresolve IP addresses to host names.
Correct Answer: A
In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.
Correct Answer: A
By default, Wireshark will only dissect port 443 traffic as SSL/TLS traffic. If you are using another port for SSL/TLS communications, you must add that port number in the HTTP preferences setting for SSL/TLS ports.
Correct Answer: A