Wireshark WCNA Practice Exams
Last updated on Oct 21,2026- Exam Code: WCNA
- Exam Name: Wireshark Certified Network Analyst
- Certification Provider: Wireshark
- Latest update: Oct 21,2026
By default, Wireshark will only dissect port 443 traffic as SSL/TLS traffic. If you are using another port for SSL/TLS communications, you must add that port number in the HTTP preferences setting for SSL/TLS ports.
- A . True
- B . False
Time reference packets are permanently given a timestamp of 00:00:00. When you close and reopen the trace file the time reference information is retained.
- A . True
- B . False
RTP provides transport functions for real-time data such as audio, video or simulation data over multicast or unicast network services.
- A . True
- B . False
Refer to the exhibit.
This packet shows the expanded TCP flags are
a. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identical filtering results.
- A . True
- B . False
The coloring of packets that match the Bad TCP default coloring rule is permanent and cannot be edited.
- A . True
- B . False
Which protocol acts as the routable network layer protocol used to get packets from end-to-end on a TCP/IP network?
- A . IP
- B . RIP
- C . TCP
- D . IGMP
Refer to the exhibit.
Which statement about the highlighted capture filter is correct?
- A . This filter will generate an error.
- B . This filter will capture gratuitous ARP pack"*
- C . This filter will capture DNS PTR queries using port 53.
- D . This filter will capture DNS packets that use non-standard port numbers.
Wireshark’s Export feature can be used to identify HTTP objects and reassemble them into their original format.
- A . True
- B . False
The value *REF* in the Time column indicates that a packet has been marked.
- A . True
- B . False
Wireshark can import CSV (comma separated value) format files for further analysis.
- A . True
- B . False