A network admin is analyzing a .pcap file to determine why a web server is returning errors. The admin sees TCP resets in the capture. What is the most useful next step in Wireshark to understand the cause?

Apply a display filter for only HTTP packets to see the requests.

Follow the TCP stream of the affected connection to see the full conversation.

Start a new capture on the server to see if resets occur again.

Delete the TCP reset packets from the capture to clean up the view.

A network admin needs to capture traffic on a server that has multiple network interfaces: one for management, one for user traffic, and one for backup traffic. The admin wants to analyze only user traffic. What should the admin do in Wireshark?

Select the interface that carries user traffic and start the capture.

Select the management interface and use a capture filter for user traffic.

Select all three interfaces and capture on all of them simultaneously.

Start a capture on any interface and then use a display filter to show only user traffic.

CiscoCertified Support Technician (CCST) Networking

Domain 5Objective 2

5.2. Perform a Packet Capture with Wireshark and Save It to a File. 100-150 Practice Questions (Page 8)

Part of the Diagnosing Problems domain, which makes up ~21% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

4concepts

Questions 36–37

36application · medium
A network admin is analyzing a .pcap file to determine why a web server is returning errors. The admin sees TCP resets in the capture. What is the most useful next step in Wireshark to understand the cause?
Select an answer first
37application · easy
A network admin needs to capture traffic on a server that has multiple network interfaces: one for management, one for user traffic, and one for backup traffic. The admin wants to analyze only user traffic. What should the admin do in Wireshark?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.

5.2. Perform a Packet Capture with Wireshark and Save It to a File. 100-150 Practice Questions (Page 8)

Questions 36–37

A network admin is analyzing a .pcap file to determine why a web server is returning errors. The admin sees TCP resets in the capture. What is the most useful next step in Wireshark to understand the cause?

A network admin needs to capture traffic on a server that has multiple network interfaces: one for management, one for user traffic, and one for backup traffic. The admin wants to analyze only user traffic. What should the admin do in Wireshark?

Keep studying — Diagnosing Problems