You are capturing traffic for a compliance audit. The capture must include all packets from a specific application, but you are unsure which port the application uses. What is the best approach?

Use a display filter before starting the capture

Use a capture filter for a guessed port

Capture all traffic on the interface and then use display filters to isolate the application's traffic

Capture only on the application's process ID

A user complains that a web application is slow. You have a .pcap file of the user's session. What is the primary benefit of analyzing this file in Wireshark?

It provides a list of all users on the network

It shows the application's source code

It lets you see the exact sequence of packets and timing between them

It automatically fixes the network issue

You have a .pcap file that contains a full TCP conversation. You want to see only the packets that were sent from the client to the server. What should you do?

Apply a display filter such as ip.src ==

Sort the packet list by source IP

Open the file in a text editor and search for the client IP

Use the Statistics > Conversations menu to view the conversation

You have captured a short burst of traffic and want to share it with a vendor. The vendor only needs the first 100 packets. What is the most efficient way to provide this?

Take a screenshot of the first 100 packets

Copy the first 100 rows from the packet list and paste into a text file

Stop the capture, select the first 100 packets, and use File > Export Specified Packets

Save the entire capture as a .pcap file and send it

CiscoCertified Support Technician (CCST) Networking

Domain 5Objective 2

5.2. Perform a Packet Capture with Wireshark and Save It to a File. 100-150 Practice Questions (Page 3)

Part of the Diagnosing Problems domain, which makes up ~21% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

4concepts

Questions 11–15

11expert · hard
You are capturing traffic for a compliance audit. The capture must include all packets from a specific application, but you are unsure which port the application uses. What is the best approach?
Select an answer first
12application · medium
A user complains that a web application is slow. You have a .pcap file of the user's session. What is the primary benefit of analyzing this file in Wireshark?
Select an answer first
13application · medium
You have a .pcap file that contains a full TCP conversation. You want to see only the packets that were sent from the client to the server. What should you do?
Select an answer first
14application · medium
You have captured a short burst of traffic and want to share it with a vendor. The vendor only needs the first 100 packets. What is the most efficient way to provide this?
Select an answer first
15foundation · easy
A network technician suspects that a user's computer is sending excessive broadcast traffic. Which tool would allow the technician to view the actual packets being transmitted to determine the source and type of the traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.