Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Wireshark WCNA Exam - Topic 3 Question 16 Discussion

You are performing a TCP scan on a target while capturing your traffic with Wireshark. Which statement about the analysis is correct?
B) If you receive ICMP responses, the target port is likely firewalled.
A) If you receive TCP Push responses, the target port is blocked.
C) If only UDP responses are received, the target does not support TCP.
D) If a TCP RST response is received, the target is not currently powered up.

Wireshark WCNA Exam - Topic 3 Question 16 Discussion

Actual exam question for Wireshark's WCNA exam
Question #: 16
Topic #: 3
[All WCNA Questions]

You are performing a TCP scan on a target while capturing your traffic with Wireshark. Which statement about the analysis is correct?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Levi at Jul 04, 2025, 07:44 AM

Limited Time Offer

25%

Off

Get Premium WCNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Santos
7 months ago
Definitely B, I've seen that happen a lot in scans.
upvoted 0 times
...
Cora
7 months ago
C is misleading, you can have UDP without TCP support.
upvoted 0 times
...
Jesusita
7 months ago
B is correct, ICMP usually means a firewall is in place.
upvoted 0 times
...
Iesha
7 months ago
Wait, D? A TCP RST means it's powered down? That's surprising!
upvoted 0 times
...
Jutta
7 months ago
I disagree, A doesn't make sense. Push responses don't mean blocked.
upvoted 0 times
...
Lemuel
8 months ago
I feel like a TCP RST response indicates the port is closed, not that the target is powered down.
upvoted 0 times
...
Tonja
8 months ago
I practiced a similar question where UDP responses were involved, and I think they don't necessarily mean TCP isn't supported.
upvoted 0 times
...
Micah
8 months ago
I think ICMP responses usually mean the port is firewalled, but I can't recall the exact details.
upvoted 0 times
...
Magdalene
8 months ago
I remember something about TCP Push responses, but I'm not sure if they indicate a blocked port or something else.
upvoted 0 times
...
Buffy
9 months ago
I think the key is to focus on the specific TCP responses mentioned in the options and what they indicate about the target's port status. I'll work through each option carefully.
upvoted 0 times
...
Reyes
9 months ago
Wait, I'm confused. Doesn't a TCP RST response mean the port is open, not that the target is not powered up? I need to double-check my TCP knowledge here.
upvoted 0 times
...
Gilbert
9 months ago
Okay, I've got this. If I see ICMP responses, that means the port is likely firewalled, which is option B. Easy peasy!
upvoted 0 times
...
Gilma
9 months ago
Hmm, I'm a bit unsure about this one. I need to make sure I understand the implications of the different TCP responses mentioned in the options.
upvoted 0 times
...
Merissa
9 months ago
This question seems straightforward. I'll review the options carefully and think through the TCP scan behavior to determine the correct answer.
upvoted 0 times
...
Peggie
11 months ago
I'm torn between B and D, but I think B is the safer bet. Who knows, maybe the target is just playing hard to get with those ICMP responses.
upvoted 0 times
...
Genevieve
11 months ago
Haha, C is a funny one. If I only get UDP responses, maybe the target just really hates TCP. Or it's a microwave posing as a server.
upvoted 0 times
Emile
10 months ago
User 3: Emile is right, it could be a possibility.
upvoted 0 times
...
Karl
10 months ago
User 2: Yeah, maybe the target just really hates TCP.
upvoted 0 times
...
Felton
11 months ago
User 1: Haha, C is a funny one.
upvoted 0 times
...
Joesph
11 months ago
User 1: Haha, C is a funny one. If I only get UDP responses, maybe the target just really hates TCP.
upvoted 0 times
...
...
Luisa
11 months ago
I think C) If only UDP responses are received, the target does not support TCP makes more sense.
upvoted 0 times
...
Natalya
12 months ago
I'm going with D. A TCP RST response means the target is up and running, just not listening on that port.
upvoted 0 times
Chaya
11 months ago
User2: Yeah, I agree. It's important to understand the different responses in Wireshark analysis.
upvoted 0 times
...
Makeda
11 months ago
User1: I think D is correct. The target is up but not listening on that port.
upvoted 0 times
...
...
Desmond
12 months ago
Option B sounds right to me. If I get ICMP responses, it means the port is likely blocked by a firewall.
upvoted 0 times
Starr
10 months ago
User 2: Yeah, that makes sense. It's a good indicator of a blocked port.
upvoted 0 times
...
Gilma
11 months ago
User 1: I think option B is correct. If we get ICMP responses, it means the port is likely firewalled.
upvoted 0 times
...
...
Rosita
12 months ago
I disagree, I believe the correct statement is D) If a TCP RST response is received, the target is not currently powered up.
upvoted 0 times
...
Colette
1 year ago
I think the correct statement is B) If you receive ICMP responses, the target port is likely firewalled.
upvoted 0 times
...

Save Cancel