Network Analysis and Wireshark Fundamentals |
This section evaluates the expertise of Wireshark Network Analysis Professionals. It encompasses foundational principles of network analysis, including defining the purpose of analysis, troubleshooting various issues, and determining optimal locations and timings for traffic capture.
|
Capture Configuration and Customization |
This domain assesses key skills in Wireshark setup and customization, such as configuring capture filters, adjusting global preferences, and interpreting time values. These are essential capabilities for Wireshark Network Security Professionals. |
Statistics and Display Filters |
Professionals are tested on their ability to interpret statistics from trace files, create effective display filters, and utilize Wireshark’s expert system. This includes tracking streams, reassembling data, and customizing profiles for efficient workflow during network analysis. |
TCP/IP Protocol Analysis |
This portion focuses on analyzing fundamental network protocols like DNS, ARP, and IP traffic. Candidates must demonstrate a strong grasp of basic TCP/IP functionalities and multi-step resolution processes, reflecting the expertise of Wireshark Network Analysts. |
Transport Layer Protocol Analysis |
This section addresses the analysis of transport layer protocols, including ICMP, UDP, and TCP traffic. Professionals must showcase their ability to evaluate normal communication patterns and understand processes like connection establishment. |
Application Protocol Analysis |
Here, candidates are tasked with analyzing traffic from application-level protocols such as DHCP, HTTP, FTP, and email. Expertise in graphing input/output rates and troubleshooting protocol-specific issues is essential for success. |
Wireless and VoIP Analysis |
This section emphasizes the analysis of 802.11 WLAN and VoIP traffic. Wireshark Network Analysts are expected to demonstrate skills in capturing WLAN traffic, analyzing signal strength, and understanding the flow of VoIP communication. |
Performance Analysis and Baselining |
This domain focuses on identifying standard traffic patterns and diagnosing performance-related issues. Candidates must display the ability to establish protocol baselines and troubleshoot performance challenges effectively.
|
Network Forensics and Security |
Professionals are tested on their understanding of network forensics, including detecting scanning activities and analyzing suspicious traffic patterns to ensure network integrity. |
Command-Line Tools and Advanced Features |
The final section evaluates proficiency in using command-line tools like Wireshark.exe and Tshark. Candidates must demonstrate competence in leveraging these tools for advanced network analysis tasks.
|
Official Information |
https://www.wcnacertification.com/ |