Free WCA-101 sample questions
Real questions from the Wireshark Certified Analyst practice bank, with the correct answer and an explanation for each one. No junk, no filler.
Try them in the simulator Same questions, with study, timed and flashcard modes.
Showing 6 of 12 free sample questions.
A network engineer is measuring the response time of a database server. They want to see the exact time elapsed between an SQL query packet and the corresponding SQL response packet. Which TWO time display formats or features would be most appropriate? (Select TWO)
An incident response team receives a 5GB trace file containing raw traffic from a compromised network segment. Upon opening the file in Wireshark, the application becomes severely unresponsive, and the status bar indicates it is taking an abnormally long time to load. The analyst notices reverse DNS queries are actively leaving their workstation. What is the most effective way to resolve this performance issue?
During an incident response investigation, an analyst suspects malware was downloaded via unencrypted HTTP. They have a 10GB capture file and want to extract the actual executable file to their local disk for malware analysis. Which Wireshark feature is designed specifically for this task?
True or False: In the Wireshark Packet Details pane, fields enclosed in square brackets (e.g., [SEQ/ACK analysis]) represent actual bytes captured directly from the network wire.
A network engineer is preparing to capture traffic on a heavily utilized 10 Gbps full-duplex core switch link. They need to ensure that physical layer errors (like runts and CRCs) are captured and that no packets are dropped due to oversubscription. Which capture method is the BEST choice?
6 more free samples are waiting
Create a free account to unlock the whole WCA-101 sample bank, or get full access to all 126 practice questions in the simulator.