Wireshark
WCNA
Q1:
Refer to the exhibit.
Which statement about this traffic is correct?
○
A
This is a TCP port scan.○
B
The SYN packets are sent from a single source port number.○
C
The responses to the SYN packets should only have the RST bit set.○
D
A firewall is blocking the SYN packets from reaching the desired host.
Wireshark
WCNA
Q2:
Baselines of basic VoIP traffic patterns should include analysis of the call setup and actual call process traffic.
○
A
True○
B
False
Wireshark
WCNA
Q3:
Which statement about ICMP is true?
○
A
Port filtering can block ICMP traffic.○
B
ICMP packets cannot cross a router.○
C
All ICMP packets are the same length.○
D
ICMP packets do not contain a UDP or TCP header.
Wireshark
WCNA
Q4:
Promiscuous mode and monitor mode offer the same functionality.
○
A
True○
B
False
Wireshark
WCNA
Q5:
You may need to capture traffic at different points on the network to identify the location of packet loss.
○
A
True○
B
False