Wireshark WCNA Practice Exams
Last updated on Oct 21,2026- Exam Code: WCNA
- Exam Name: Wireshark Certified Network Analyst
- Certification Provider: Wireshark
- Latest update: Oct 21,2026
All packets that contain UDP or TCP headers are counted in the IP Protocol Types statistic.
- A . True
- B . False
Display filters are applied to decrease the time required to identify the cause of poor network performance, unusual network traffic patterns or other traffic of interest.
- A . True
- B . False
Wireshark can capture traffic on an interface even if that interface is not listed on the Start Page.
- A . True
- B . False
Which statement about packet timestamps is correct?
- A . Sorting on packet timestamps alters the packet numbers in the trace file.
- B . Packet timestamps for pcap files can denote time to the nanosecond level.
- C . You can alter packet timestamps of separate packets in a trace file using Editcap.
- D . Packet timestamps are provided by WinPcap, libpcap, or AirPcap at the time packets are captured.
Baselines of basic VoIP traffic patterns should include analysis of the call setup and actual call process traffic.
- A . True
- B . False
To increase the number of recently created display filters that Wireshark remembers, increase the Filter display max, list entries value in Wireshark’s Preferences window.
- A . True
- B . False
Refer to the exhibit.
Which statement about this packet is correct?
- A . The sender will open port 1026 for an FTP data connection.
- B . This communication is generated by the "Blackjack" application.
- C . The packet is a request to the target to open port 1026 for a new TCP connection.
- D . The receive window size value indicates no additional data can be received on port 1025.
The gratuitous ARP process is not required if a host is configured with a static IP address.
- A . True
- B . False
Which name resolution process translates port numbers to service names if they are listed in Wireshark’s services file?
- A . SMI name resolution
- B . network name resolution
- C . transport name resolution
- D . MAC address name resolution
Network congestion is defined as a condition that can cause packet loss or slow data transfer because the network itself cannot support the data transfer rate.
- A . True
- B . False