WCNA Practice Exam Questions and Answers

Which statement about this packet is correct?

The value *REF* in the Time column indicates that a packet has been marked.

This image shows frame 2781which is a Window Update packet. This packet indicates that 10.0.52.164's TCP Window Size field value has increased since the last packet sent by that host.

Wireshark can import CSV (comma separated value) format files for further analysis.

The capture filterport 67 would capture all DHCP traffic seen by Wireshark.

The TCP Time-Sequence graph can depict packet loss.

Null scans use legal TCP packet formats, but listen for illegally-formed TCP response packets.

DNS can onlyresolve IP addresses to host names.

Promiscuous mode and monitor mode offer the same functionality.

Network analysis is oftenconsidered 'electronic surveillance' or 'wiretapping* and may be illegal.

You can identify compromised hosts that are communicating with Command and Control (C&C) servers by capturing traffic close to the network egress point and filtering on the IP addresses of the suspect C&C servers.

By default, Mergecap combinestrace files based on the order they are listed on the command-line.

You are analyzing network traffic, but you only see ARP queries - you do not see any ARP responses. What could cause this situation?

POP requests consist of a Request Command and Request Parameter.

This packet was sent from an HTTP client.