WCNA Dumps By Pros - 1st Attempt Guaranteed Success [Q53-Q68]

Q53. Null scans use legal TCP packet formats, but listen for illegally-formed TCP response packets.

True

False

Q54. Display filters areapplied to decrease the time required to identify the cause of poor network performance, unusual network traffic patterns or other traffic of interest.

True

False

Q55. Network analysis is oftenconsidered ‘electronic surveillance’ or ‘wiretapping* and may be illegal.

True

False

Q56.

Which statement about this traffic is correct?

This is a TCP port scan.

The SYN packets are sent from asingle source port number.

The responses to the SYN packets should only have the RST bit set.

A firewall is blocking the SYN packets from reaching the desired host.

Q57. POP requests consist of a Request Command and Request Parameter.

True

False

Q58. Which statement about TCP sequence and acknowledgment numbering is correct?

The sequence number always increments by 1 for each data packettransmitted.

Both sides of a TCP connection must agree on an Initial Sequence Number value.

Starting Sequence Numbers cannot be larger than 65,535 because this is a 2-byte field.

The Acknowledgment Number field indicates the next sequence number expected from the other side of the connection.

Q59. The IPv4 Total Length field defines the length of the IP header, valid data and data link padding.

True

False

Q60. Which protocol is used to locate the hardware address of a local target or local router?

ARP

DNS

DHCP

Q61.

Which statement about this packet is correct?

The source and destination hosts support window scaling.

This packet is establishing window scaling between the two TCP hosts.

The Window Size field value indicates that no additional data can be received by 10.0.52.164.

The Sequence Number field value is too low to allow additional data segments to be received by10.0.52.164.

Q62. When you disable the UDP protocol decoding process, applications that use UDP (such as DHCP and DNS) will not bedecoded.

True

False

Q63. You are performing a TCP scan on a target while capturing your traffic with Wireshark. Which statement about the analysis is correct?

If you receive TCP Push responses, the target port is blocked.

If you receive ICMP responses, the target port is likely firewalled.

If only UDP responses are received, the target does not support TCP.

If a TCP RST response is received, the target is not currently powered up.

Q64. Which transport is used for multicast and broadcast traffic?

TCP

UDP

ICMP

ARP

Q65. Time reference packets are permanently given a timestamp of 00:00:00. When you close and reopen the trace filethe time reference information is retained.

True

False

Q66. During an ideal data transfer process, the TCP Time-Sequence graph plot points should run from the lower left corner to the upper rightcorner in a diagonal line of i-bars.

True

False

Q67. You may need to capture traffic at different points on the network to identify the location of packet loss.

True

False

Q68. Baselines of basic VoIP traffic patterns should include analysis of the call setup and actual call process traffic.

True

False