Wireshark WCA-101 - Wireshark Certified Analyst Exam
Page: 2 / 10
Total 46 questions
Question #6 (Topic: Exam A)
When troubleshooting an application problem, you notice a very high number of duplicate packets in a capture file. Which capture method is most likely to cause this?
A. Network tap
B. Switch SPAN port/Port Mirror
C. Client endpoint
D. Firewall
Answer: B
Question #7 (Topic: Exam A)
You need to capture traffic in a data center on a 10Gpbs link. Which capture method would you use to get the most accurate timestamps?
A. On the hypervisor
B. SPAN port
C. On the load-balancer
D. Network tap
E. Directly on the server
Answer: D
Question #8 (Topic: Exam A)
Where were the packets above captured?
A. Network tap on server network
B. On the client endpoint
C. SPAN/Mirror port near the client
D. On the server endpoint
E. SPAN/Mirror port near the server
F. Load balancer
Answer: B
Question #9 (Topic: Exam A)
When the promiscuous box is checked on a capture interface, what does this option enable?
A. Captures WiFi control packets and network packets, regardless of the destination MAC.
B. Captures only packets with a destination MAC address of the interface.
C. Captures all packets arriving on interface, regardless of destination MAC.
D. Captures packets with FCS Errors.
Answer: C
Question #10 (Topic: Exam A)
What is the max storage space that this capture will use?
A. 50GB
B. 5MB
C. 500MB
D. 5GB
Answer: D
