Protocol Analysis Wireshark Certified Network Analyst Practice - WCNA 模擬練習
Wireshark's GeoIP feature launches an OpenStreetMap view of the world from the Endpoints window to plot IP addresses seen in the trace file.
正解: A
Both the capture and display filter syntax for ARP requests and replies is arp.
正解: A
The ip.addr != 10.2.4.1 display filter shows all packets except ones that contain the address 10.2.4.1 in the source or destination IP address fields.
正解: B
You can use the display filter ss1. record.content_type = =22 to view just the SSL/TLS handshakepackets.
正解: A
DNS can onlyresolve IP addresses to host names.
正解: A
Wireshark contains numerous pre-defined columns that can be added easily to the Packet List pane.
正解: A
DNS responses contain four sections: Question, Answer RR, Authority RR and Additional RR.
正解: A
This image shows frame 2781which is a Window Update packet. This packet indicates that 10.0.52.164's TCP Window Size field value has increased since the last packet sent by that host.
正解: A
Applications may override the default port value defined in the TCP/IP stack services file.
正解: A
Which traffic characteristic is often seen when analyzing database applications that transfer individual records across the network?
正解: D