You need to capture traffic on a Windows PC that has both Wi-Fi and Ethernet connections. The user is currently using Wi-Fi. What should you do in Wireshark?

Capture on both interfaces simultaneously

Select the Wi-Fi interface and start the capture

Select the Ethernet interface and start the capture

Disable Wi-Fi and capture on Ethernet

A network admin needs to capture traffic on a remote router to troubleshoot a WAN issue. The admin has SSH access to the router but cannot install Wireshark on it. The admin wants to save the capture for analysis on a local PC. What is the best approach?

Use Wireshark's remote capture feature over SSH to capture directly on the router.

Use tcpdump on the router to capture packets and save to a .pcap file, then copy the file to the local PC and open it in Wireshark.

Use the router's built-in packet capture feature and save the output as a text file.

Use a laptop connected to the router's console port to capture traffic.

You need to capture traffic on a remote server that is in a different building. You have administrative access to the server but cannot physically visit it. What is the most practical way to capture the traffic?

Ask someone to plug a laptop into the server's switch port

Use Wireshark's remote capture feature over SSH

Capture on your local workstation and filter for the server's IP

Use remote desktop to access the server and run Wireshark there, saving the capture to a shared drive

A network admin needs to verify whether a specific application is sending malformed packets. The application runs on a single workstation. What is the most efficient way to capture only that workstation's traffic?

Use a hub to connect the workstation and capture on a laptop

Run Wireshark on a server in a different VLAN and capture all traffic

Configure a SPAN port on the switch and capture on a separate laptop

Run Wireshark on the workstation and capture on its active interface

A network engineer is troubleshooting a VoIP call quality issue. The engineer suspects packet loss or jitter on the network path. What is the primary reason to use Wireshark for this diagnosis?

To replace the VoIP server's logging system for call detail records.

To generate test traffic to the VoIP server to see how the network responds.

To configure QoS policies on the router to prioritize VoIP traffic.

To capture and inspect the actual RTP packets to measure jitter and detect lost or out-of-order packets.

CiscoCertified Support Technician (CCST) Networking

Domain 5Objective 2

5.2. Perform a Packet Capture with Wireshark and Save It to a File. 100-150 Practice Questions (Page 4)

Part of the Diagnosing Problems domain, which makes up ~21% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

4concepts

Questions 16–20

16application · medium
You need to capture traffic on a Windows PC that has both Wi-Fi and Ethernet connections. The user is currently using Wi-Fi. What should you do in Wireshark?
Select an answer first
17expert · hard
A network admin needs to capture traffic on a remote router to troubleshoot a WAN issue. The admin has SSH access to the router but cannot install Wireshark on it. The admin wants to save the capture for analysis on a local PC. What is the best approach?
Select an answer first
18expert · hard
You need to capture traffic on a remote server that is in a different building. You have administrative access to the server but cannot physically visit it. What is the most practical way to capture the traffic?
Select an answer first
19application · medium
A network admin needs to verify whether a specific application is sending malformed packets. The application runs on a single workstation. What is the most efficient way to capture only that workstation's traffic?
Select an answer first
20application · medium
A network engineer is troubleshooting a VoIP call quality issue. The engineer suspects packet loss or jitter on the network path. What is the primary reason to use Wireshark for this diagnosis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.