Online WCNA Test Brain Dump Question and Test Engine [Q58-Q81] : Latest Exam Prep : http://certify.vceprep.com

NEW QUESTION 58
When you apply a display filter, the Status Bar indicates the total number ofpackets captured and the packets displayed.

True

False

NEW QUESTION 59
The gratuitous ARP process is not required if a host is configured with a static IP address.

True

False

NEW QUESTION 60
In the case of a high latency path, more than three identical ACKs may be sent before the retransmission is seen in a trace file.

True

False

NEW QUESTION 61
If a DHCP client does not receive an acknowledgment before the expiration of the rebinding time, the DHCP client must release its IP address and send a DHCP broadcast tolocate a DHCP server or Relay Agent.

True

False

NEW QUESTION 62
Whichdisplay filter is used to display all DHCP traffic?

dhcp

bootp

tcp.port==68

udp.dst.port==67

NEW QUESTION 63
By default, Wireshark will only dissect port 443 traffic as SSL/TLS traffic. If you are using another port for SSL/TLS communications, you must add that port number in the HTTP preferences setting for SSL/TLS ports.

True

False

NEW QUESTION 64
Which transport is used for multicast and broadcast traffic?

TCP

UDP

ICMP

ARP

NEW QUESTION 65
The value *REF* in the Time column indicates that a packet has been marked.

True

False

NEW QUESTION 66

This packet was sent from an HTTP client.

True

False

NEW QUESTION 67
How do you determine which Profile is in use while you are capturing traffic?

Examine the Wireshark Title Bar.

Lookin the Status Bar Profile column.

Right-click on the Packet Summary pane.

Open the Preferences | Interface information.

NEW QUESTION 68
Port resolution can use the TCP/IP stack services file to determine the correct destination port to use in the TCP or UDP header.

True

False

NEW QUESTION 69

This packet shows the expanded TCP flags area. The display filter tcp.fiags.syn==1 && tcp.flags.ack==1 and the display filter tcp.fiags=0xi2 provide identicalfiltering results.

True

False

NEW QUESTION 70
You can use the display filter ss1. record.content_type = =22 to view just the SSL/TLS handshakepackets.

True

False

NEW QUESTION 71

Which statement aboutthis color rule is correct?

This color rule will generate a syntax error.

This color rule will be saved in the Branch Office #1 profile.

This color rule must be placed under all other TCP color filters.

This color rule is based on the BerkeleyPacket Filter (BPF) format.

NEW QUESTION 72
How do you quickly spot large gapsin time between packets in a trace file containing 6,000 packets?

Open and examine Wireshark’sExpert Infoswindow.

Look for packets colorized based on Wireshark’s default coloring rule for high delta times.

Set the Time column toSeconds Since Beginning of Captureand scroll through the trace file.

Set the Time column toSeconds Since Previously Displayed Packetand sort the Time column.

NEW QUESTION 73
What is the most efficient method for saving non-contiguous packets in a trace file?

Mark the packets and choose to save the marked packets.

Apply a color filter for each packet and save all colored packets.

Right click and copy the packets individually to a new instance of Wireshark.

Open the packets in a new window and save them under the same file name.

NEW QUESTION 74
The coloring of packets that match theBadTCPdefault coloring rule is permanent and cannot be edited.

True

False

NEW QUESTION 75

The image depicts eight files that are part of a file set.

True

False

NEW QUESTION 76
DNS can onlyresolve IP addresses to host names.

True

False

NEW QUESTION 77
Session Initiation Protocol (SIP) is a protocol that can be used to carry voice data.

True

False

NEW QUESTION 78
You may need to capture traffic at different points on the network to identify the location of packet loss.

True

False

NEW QUESTION 79
The TCP Time-Sequence graph can depict packet loss.

True

False

NEW QUESTION 80
Whichstatement about ICMP is true?

Port filtering can block ICMP traffic.

ICMP packets cannot cross a router.

All ICMP packets are the same length.

ICMP packets do not contain a UDP or TCP header.

NEW QUESTION 81
You have opened a trace file that has been sent to you and you noticed the timestamp only offers millisecond-level time values. You can enable Wireshark to add themicrosecond detail information to these packets.

True

False