A network engineer is capturing traffic on a high-throughput link to diagnose a performance issue. The engineer wants to save the capture to a file but is concerned about losing packets due to disk I/O bottlenecks. What is the best strategy to minimize packet loss?

Use a display filter to reduce the amount of data written to disk.

Capture all traffic and save to a network share to offload disk I/O.

Use a capture filter to reduce the amount of traffic, and save to a fast SSD rather than a slow HDD.

Increase the capture buffer size to unlimited and let Wireshark handle the disk writes.

A technician has captured a small set of packets and wants to save only the packets that show a specific error message. What is the correct way to save a subset of packets in Wireshark?

Copy the packets to the clipboard and paste them into a new capture file.

Use File > Save As and choose .pcap, which will save only the filtered packets automatically.

Apply a display filter to show only the error packets, then use File > Export Specified Packets and save as .pcap.

Delete the unwanted packets from the packet list and then save the file.

In Wireshark, what is the first step to begin capturing packets on a specific network interface?

Click the Stop Capturing Packets icon

Select the interface from the list and click the Start Capturing Packets icon (shark fin)

Apply a display filter before starting the capture

Open a previously saved .pcap file

You have captured packets in Wireshark that show a failed DHCP exchange. You need to send the capture to a colleague who will open it later in Wireshark. What should you do?

Save the capture as a .pcap file and send that file

Copy the packet list text from the main window and paste it into an email

Take a screenshot of the Wireshark window and attach it

Export the displayed packets as a CSV file

CiscoCertified Support Technician (CCST) Networking

Domain 5Objective 2

5.2. Perform a Packet Capture with Wireshark and Save It to a File. 100-150 Practice Questions (Page 7)

Part of the Diagnosing Problems domain, which makes up ~21% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

4concepts

Questions 31–35

31expert · hard
A network engineer is capturing traffic on a high-throughput link to diagnose a performance issue. The engineer wants to save the capture to a file but is concerned about losing packets due to disk I/O bottlenecks. What is the best strategy to minimize packet loss?
Select an answer first
32application · medium
A technician has captured a small set of packets and wants to save only the packets that show a specific error message. What is the correct way to save a subset of packets in Wireshark?
Select an answer first
33foundation · easy
In Wireshark, what is the first step to begin capturing packets on a specific network interface?
Select an answer first
34application · medium
You have captured packets in Wireshark that show a failed DHCP exchange. You need to send the capture to a colleague who will open it later in Wireshark. What should you do?
Select an answer first
35foundation · easy
A technician has finished a packet capture in Wireshark and wants to save it to a file for later analysis. Which menu option should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.