WCNA practice examsIn development
Wireshark Certified Network Analyst
Deep packet analysis with Wireshark, the ground truth of networking: capturing the right traffic with the permanent-discard capture filter versus the display filter, feeding a capture through a SPAN or TAP, and reading the nested Ethernet, IP, TCP/UDP and application layers with TCP handshake and sequence behaviour; then follow-stream, statistics and Expert Information to navigate a capture, performance troubleshooting distinguishing a network problem from an application problem, security analysis seeing scans, exfiltration and beaconing directly, and wireless, VoIP and high-volume capture considerations.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Wireshark, capture and the protocol stack | Not published |
| Analysis, troubleshooting and security | Not published |
Two sample questions
1. Which question does the Ethernet header answer in a capture?
- Which adjacent device sent the frame — correct
- Which host originated the conversation
- Which application produced the data
- Which network the packet is destined for
Why: Hardware addresses change at every hop, so the link layer describes the last leg rather than the endpoints of the conversation.
2. Which pattern suggests command-and-control beaconing?
- Bulk transfer to many destinations
- Short bursts of scanning activity
- Repeated failed name resolutions
- Small regular transfers to one host — correct
Why: Regularity is the signal: a client checking in on a timer looks nothing like a person, whatever protocol it uses.
The real WCNA exam
| Length | 90 minutes |
|---|---|
| Questions | 60 |
| Pass mark | Scaled; the programme does not publish the percentage |
| Price | Around $299 USD |
| Recommended before you sit it | None enforced. Solid networking fundamentals are assumed. |
| Valid for | 3 years |
Exam facts as published by Chappell University; always check the vendor’s page before you book.
Study WCNA with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.