Wireshark® Certified Network Analyst™Official Exam Prep Guide Second Edition Exam WCNA-102.x 2nd Edition (Version 2.0b) Laura Chappell Founder, Chappell University™ Founder, Wireshark University™ This book is intended to provide practice quiz questions based on the thirty-three areas of study defined for the Wireshark Certified Network Analyst Exam. This Official Exam Prep Guide offers a companion to Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study Guide – Second Edition (ISBN10: 1-893939-94-4; ISBN13: 978-1-893939-94-3; www.wiresharkbook.com) Available in hardcopy and digital format. Visit www.amazon.com for more details. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www.wiresharkbook.com 0b) Copyright 2012. dba “Chappell University”. updates. Inc. No part of this book. photocopying. at 408/378-7841 or send email to [email protected]® Certified Network Analyst ™ Official Exam Prep Guide Second Edition Exam WCNA-102.wiresharkbook. cover design or contents of the referenced book website. events.. by any means (electronic. training courses. For general information on Chappell University or Protocol Analysis Institute. Protocol Analysis Institute.com 10-digit ISBN: 1-893939-90-1 13-digit ISBN: 978-1-893939-90-5 Distributed worldwide for Chappell University through Protocol Analysis Institute.. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www. To arrange bulk purchase discounts for sales promotions.com . may be reproduced or transmitted in any form. future titles or courses. contact the Protocol Analysis Institute. Book URL: www.wiresharkbook. recording or otherwise) without the prior written permission of the publisher.com. Inc. please contact Chappell University at the address and email listed on the next page. including interior design. or other purposes. Inc.com. including information on corporate licenses. www. All rights reserved.x 2nd Edition (Version 2.wiresharkbook. or related materials. Inc. Protocol Analysis Institute. Chappell University and the author(s) make no representations or warranties or merchantability or fitness for a particular purpose. Chappell University and the author(s) make no representations or warranties that extend beyond the descriptions contained in this paragraph. ya know. or other damages. Protocol Analysis Institute. Limit of Liability/Disclaimer of Warranty. Trademarks. plagiarize or upload this book to the Internet. No warranty may be created or extended by sales representatives or written sales materials. Chappell University and author(s) shall not be liable for any loss of profit or any other commercial damages.wiresharkbook. consequential. Protocol Analysis Institute.. Inc. trademarks.09 nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www. Waves Envisioned during Late Nights at Work.com www. # 343 San Jose. is the exclusive developer for Chappell University.wiresharkbook.com. service marks. reselling or duplication of this book and related materials used in this book without explicit written authorization is expressly forbidden. personal or educational use.Created with Apophysis 2. Inc. Protocol Analysis Institute. All brand names and product names used in this book or mentioned in this book are trade names. In all cases.For authorization to photocopy items for corporate. CA 95129 USA info@chappellU. or registered trademarks of their respective owners. Protocol Analysis Institute. Inc. incidental. contact Protocol Analysis Institute. We will find you.. Inc. Inc. at email to info@chappellU. 5339 Prospect Road.com Cover: Fractal image. # 343 San Jose. The accuracy or completeness of the information provided herein and the opinions stated herein are not guaranteed or warranted to produce any particular result and the advice and strategies contained herein may not be suitable for every individual. by Scott Spicer .com Chappell University 5339 Prospect Road. including without limitation special. Inc.chappellU.. CA 95129 USA www. and Chappell University assume no liability for any damages caused by following instructions or using the techniques or tools listed in this book or related materials used in this book.com . Inc. The author and publisher have used their best efforts in preparing this book and the related materials used in this book. So don’t steal it. Always ensure you have proper authorization before you listen to and capture network traffic. Copy Protection. Protocol Analysis Institute. ....................................... ii What’s Online at www..............................................................................................Table of Contents About This Book ................ 153 Part 3 Answer Explanations ............................................ 99 Part 2 Answer Explanations ................................................................................................. iii Wireshark Certified Network Analyst™ Program Overview ..wiresharkbook................................................................................................................ 41 Part 2: Practice Question Set 101-206............................................................................................................................................................. 101 Part 3: Practice Question Set 207-304......... iii Which Version of the Exam Does This Book Match? ..wiresharkbook......................................................................... 1 Part 1 Answer Key ................................................ 39 Part 1 Answer Explanations ............................................ iii How Do I Earn the Wireshark Certified Network Analyst Status? .......................................................................................................................................................................................................... 121 Part 3 Answer Key .. 155 nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www................................. v Part 1: Practice Question Set 1-100 ......................................................... iv Wireshark University and Wireshark University Training Partners... 63 Part 2 Answer Key ........... i How Should You Use this Book? ................... iii Wireshark Certified Network Analyst Exam Objectives ............................com .............. iv Schedule Customized Onsite/Web-Based Training ........ iii Why Should I Pursue the Wireshark Certified Network Analyst Certification? ....com?............................... ISBN10: 1-893939-94-4 ISBN13: 978-1-893939-94-3 Paperback: 986 pages Website: www.wiresharkbook.com/epg.Second Edition provides you with over 300 practice questions to prepare you for the Wireshark Certified Network Analyst Exam. Print the Answer Sheets located at www. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www.Introduction i About This Book This book is intended to provide practice quiz questions based on the thirty-three areas of study defined for the Wireshark Certified Network Analyst Exam. This Official Exam Prep Guide offers a companion to Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study Guide – Second Edition.com . There is one Answer Sheet for each of the three parts of this book. Answer Sheets are formatted to match the Answer Keys for fast grading.wiresharkbook. The Answer Sheets enable you to take the tests in the book multiple times without marking up the book and seeing previous answer selections.wiresharkbook.com Wireshark Certified Network Analyst™ Official Exam Prep Guide . com/epg. The Answer Explanation defines the Study Guide chapters that cover the question topic. Step 4: Grade Your Answers Each chapter ends with an Answer Key and Answer Explanation section.com . Second Edition. Use the Answer Key to quickly grade your answers. The Answer Sheets are formatted to match the Answer Key for each part of the book enabling faster self-grading. Ensure you have the knowledge and skills to master the objectives listed. Key Area Step 1: The icon marks key topics to study in preparation for the Exam. Part 1 covers more of the basic concepts and skills of analysis and basic Wireshark functionality. respectively.wiresharkbook.ii Introduction How Should You Use this Book? This book is separated into three parts. We recommend that you answer Part 1 questions first and grade those answers before moving on to Part 2 and Part 3. The following provides a recommendation of how to use this book to effectively prepare for the Wireshark Certified Network Analyst Exam. This saves you from the headache of flipping pages from the questions to the Answer Key. you can download Answer Sheets from www. Step 2: Print Out the Answer Sheets As an alternative to writing your answers directly in this book. Part 1 covers Sections 1-11 of the Wireshark Certified Network Analyst Exam while Parts 2 and 3 cover Sections 12-22 and Sections 23-33. Step 3: Answer the Book Practice Questions in Three Parts The book is divided into three separate sections of approximately 100 questions each.wiresharkbook. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www. Review the Study Guide Each chapter in the Study Guide and each part of this Official Exam Prep Guide lists the objectives covered in the Wireshark Certified Network Analyst Exam. Refer to the Answer Explanation for details on the correct/incorrect answers posed by each question. com. Wireshark Certified Network Analyst Exam Objectives Each part in this book provides a list of exam objectives for the Wireshark Certified Network Analyst program.com/certification for additional information on the Wireshark Certified Network Analyst program. Wireshark Certified Network Analyst™ Program Overview The Wireshark Certified Network Analyst Exam is a globally-available.Introduction iii What’s Online at www. Why Should I Pursue the Wireshark Certified Network Analyst Certification? Successful completion of the Wireshark Certified Network Analyst Exam indicates you have the knowledge required to capture network traffic. Second Edition. Questions regarding your Wireshark Certified Network Analyst status may be directed to [email protected] files) MaxMind® GeoIP® database files (. proctored exam to meet the secure and widely available delivery requirements desired by candidates. For additional information regarding exam preparation.com.wiresharktraining. analyze the results and identify various anomalies related to performance or security issues.com? There are numerous references and resources related to this book and Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study Guide.wiresharkbook. Visit www.com/certification. These resources include: • • • • • • Numerous trace files (.pcap/.wiresharktraining.wiresharkbook. visit www. match the Wireshark Certified Network Analyst Exam version 102.pcapng files) Chanalyzer recordings (.dat files) PhoneFactor™ SSL/TLS vulnerabilities documents and trace files Wireshark configurations Practice Exam Blank Answer Sheets Which Version of the Exam Does This Book Match? This book and the practice questions and quizzes herein.com . nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www.x. available at www.wiresharkbook. Register for the proctored Wireshark Certified Network Analyst Exam online at www.com) and various Wireshark University Certified Training Partners. (PAI represents the Protocol Analysis Institute. troubleshoot.com/pai. The goal of Wireshark University is to provide education on how to analyze. For more information on Wireshark University. self-paced and online formats through Chappell University (www. Wireshark University Certified Training Partner Program. Upon completion of the Wireshark Certified Network Analyst Exam. visit www. you must pass a single exam—the WCNA-102x exam. Currently.com. the Wireshark Certified Network Analyst Members Program. visit www. the world’s most popular network analyzer (www.com.org).com/certification.webassessor.iv Introduction How Do I Earn the Wireshark Certified Network Analyst Status? To earn the Wireshark Certified Network Analyst status. Candidates who successfully pass the Wireshark Certified Network Analyst Exam will receive their Wireshark Certified Network Analyst Confirmation package that contains the candidate’s certificate and details on maintaining Wireshark Certified Network Analyst status.chappellU.com .com/certification. Questions regarding your Wireshark Certified Network Analyst status may be directed to info@wiresharktraining.wiresharktraining.wiresharkbook.wiresharktraining. For more information on the Exam registration process. visit www.com or send email to info@wiresharktraining. Wireshark University courses are offered throughout the world in instructor-led. an individual will receive a pass/fail score. Wireshark University and Wireshark University Training Partners Wireshark University was launched in March 2007. the parent company of Wireshark University and Chappell University). Wireshark University is responsible for creating and maintaining the Wireshark Certified Network Analyst Exam. secure and optimize network communications using Wireshark.wireshark. and the Wireshark University Certified Training Materials. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www.wiresharktraining. For more information on the Wireshark Certified Network Analyst program. Wireshark University Certified Instructor Program. Customized courses can be based on your network traffic or previously captured traffic from numerous global networks. Contact us at [email protected] for more information on scheduling customized training for your organization.com or visit www. hands-on course environment.chappellU.com . effective. contact us directly. Customized courses can be developed and delivered by Laura Chappell. nd Wireshark Certified Network Analyst™ Official Exam Prep Guide 2 Edition à www.wiresharkbook. Course lengths can run from 2 days to 10 days and even include a web-based delivery option to meet the training needs of geographically dispersed students.Introduction v Schedule Customized Onsite/Web-Based Training If you are interested in training a team in a fast.