Wireshark WCNA Practice Exams
Last updated on Oct 21,2026- Exam Code: WCNA
- Exam Name: Wireshark Certified Network Analyst
- Certification Provider: Wireshark
- Latest update: Oct 21,2026
Refer to the exhibit.

The image depicts eight files that are part of a file set.
- A . True
- B . False
Wireshark’s GeoIP feature launches an OpenStreetMap view of the world from the Endpoints window to plot IP addresses seen in the trace file.
- A . True
- B . False
During an ideal data transfer process, the TCP Time-Sequence graph plot points should run from the lower left corner to the upper right corner in a diagonal line of i-bars.
- A . True
- B . False
What is the purpose of creating Wireshark profiles?
- A . create a customized method of name resolution
- B . discover and test RSA keys for traffic decryption
- C . customize Wireshark for more efficient analysis in specific environments
- D . create a manageable database of packets for use in third-party programs
DNS can only resolve IP addresses to host names.
- A . True
- B . False
In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.
- A . True
- B . False
Session Initiation Protocol (SIP) is a protocol that can be used to carry voice data.
- A . True
- B . False
You can use the display filter ss1. record.content_type = =22 to view just the SSL/TLS handshake packets.
- A . True
- B . False
Columns can be reordered by dragging them into their new positions directly in the Packet List pane.
- A . True
- B . False
Refer to the exhibit.

This image shows frame 2781 which is a Window Update packet. This packet indicates that 10.0.52.164’s TCP Window Size field value has increased since the last packet sent by that host.
- A . True
- B . False