Transcription

Wireshark CertifiedNetwork Analyst Programwww.wiresharktraining.comLaura Chappell, Wireshark raining.com

Wireshark Certified Network Analyst Designed to confirm individual competenciesin using Wireshark to locate the cause ofnetwork problems (poor performance orsecurity‐related) and confirm your knowledgeof TCP/IP network communications in general. Wireshark Certified Network Analyst Examwas DoD 8570‐approved by the US Army Download Wireshark for free g.com

Contents Certification Process Certification Maintenance Wireshark Certified Network AnalystOnline Portal Registering for the Exam Sample Exam Questions Q&Awww.wiresharktraining.com

The iresharktraining.com

The Certification aining.comRecertificationProcess

The Certification ProcessWireshark UniversityAuthorized TrainingPartner CoursesStudy GuideExam Prep GuideOn‐the‐Job StudyPractice omwww.chappellU.comwww.scos.nl

The Certification on(Study/Prepare)ProcessMaintenanceWireshark UniversityAuthorized TrainingPartner CoursesStudy GuideExam Prep GuideOn‐the‐Job StudyPractice sISBN10: 1‐893939‐99‐5ISBN13: 978‐1‐893939‐99‐8Paperback: 800 pagesBook URL: www.wiresharkbook.comI have recommended all my junior analysts read WNA.They will learn a ton about Wireshark, and will alsoBe able to follow Laura's explanations of manycommon network protocols. We may even pursue thecertification tied to the book. Great work Laura!‐ Richard Bejtlich, TaoSecurity.com

The Certification on(Study/Prepare)ProcessMaintenanceWireshark UniversityAuthorized TrainingPartner CoursesStudy GuideExam Prep GuideOn‐the‐Job StudyPractice s10‐digit ISBN: 1‐893939‐98‐713‐digit ISBN: 978‐1‐893939‐98‐1Paperback: 202 pages (includes CD)Book URL: www.wiresharkbook.com/epgReleased: August 2010Sold through Amazon.com

The Certification on(Study/Prepare)ProcessMaintenanceWireshark UniversityAuthorized TrainingPartner CoursesStudy GuideExam Prep GuideOn‐the‐Job StudyPractice s

The Certification on(Study/Prepare)ProcessMaintenanceWireshark UniversityAuthorized TrainingPartner CoursesStudy GuideExam Prep GuideOn‐the‐Job StudyPractice aiRecertificationProcess

The Certification on(Study/Prepare)ProcessMaintenanceRegister and take the Exam atwww.webassessor.com/pai80 countries and almost 500testing centers worldwideNo testing center? Learn aboutthe Online Proctored option RecertificationProcess

Your Welcome Kit www.wiresharktraining.comYour signed CertificateYour Certification ID NumberYour Portal login informationLogo access and usage detailsCPE requirement details

The Certification on(Study/Prepare)ProcessMaintenance20 ContinuingProfessionalEducation(CPE) Creditsyearly for 3years – Freetrainingthrough yourOnline Portal www.wiresharktraining.comWireshark FunctionalityNetwork CommunicationsNetwork TroubleshootingNetwork SecurityRecertificationProcess

The Certification ProcessRegister andtake thecurrent Exam‐ Latest versionof Wireshark‐ Latest Examobjectives‐ Updatedtechnologies‐ Updatedmethodswww.wiresharktraining.com

This is NOT Your Typical Certification Program Our goal is to build a global team of WiresharkCertified Network Analysts capable of tacklingthe biggest network challenges. We want you to succeed and benefit fromachieving the Wireshark Certified NetworkAnalyst designation. The Online Portal provides you with freeupdated/advanced training after yourcertification to enhance your network analysisskillswww.wiresharktraining.com

ww.wiresharktraining.com

Certification cation(Study/Prepare)ProcessMaintenance20 ContinuingProfessionalEducation(CPE) Creditsyearly for 3years – Freetrainingthrough yourOnline Portal www.wiresharktraining.comWireshark FunctionalityNetwork CommunicationsNetwork TroubleshootingNetwork SecurityRecertificationProcess

60 Minutes of Activity 1 CPERead/Write Technical Books, RFCs, Articles, etc.Listen/Watch Podcasts, webinars, online training eventsAttend Conferences, seminars, member meetingsWork Submit reports based on your on‐the‐job experiencewww.wiresharktraining.com

Manual CPE Submission Processwww.wiresharktraining.com/cpe Only required for CPEsgained outside yourWireshark AnalystOnline Portalwww.wiresharktraining.com

Your Online ng.com

Certification cation(Study/Prepare)ProcessMaintenance20 ContinuingProfessionalEducation(CPE) Creditsyearly for 3years – Freetrainingthrough yourOnline Portal www.wiresharktraining.comWireshark FunctionalityNetwork CommunicationsNetwork TroubleshootingNetwork SecurityRecertificationProcess

The Wireshark Certified NetworkAnalyst nProcessWCNA Online Portal9 Activities worth 20 CPE credits per year (onlinecourses/study)9 Up‐to‐date techniques and dissections of networktraffic9 You can contribute using work‐related experiencefor credit9 No need to submit CPEs for this CPE training –automatically credited to your WiresharkCertified Network Analyst Accountwww.wiresharktraining.com

The Online PortalWCNA Online PortalTake Wireshark CertifiedNetwork Analyst CPEtraining and print yourtranscript to meet otherCertification CPErequirements*www.wiresharktraining.com* Provided training meets requirements by third‐party certification programs.

Wireshark Certified Network AnalystCPE Training and Other Cert ProgramsCISSP CPE Requirementswww.wiresharktraining.com

Register for ing.com

Register for a Free Test Taker Account atwww.webassessor.com/paiwww.wiresharktraining.com

Choose your desired Exam and click Buy Now.You will not be asked for payment until you have completed scheduling yourExam. You must complete payment information before accessing Practice Exams.www.wiresharktraining.com

The .com

What’s On the Exam? Four “Focus Areas”– Wireshark Functionality– Network Communications– Network Troubleshooting– Network Forensics/Security Pass/Fail indication upon completion of Examwww.wiresharktraining.com

Thirty‐Three Specific SectionsSection Detail is located in the Certification Info Packat arktraining.com

Sample Multiple Choice QuestionWhat type of TCP scan would this filter display?(tcp.flags.urg 1) && (tcp.flags.push 1)&& (tcp.flags.fin 1)A.B.C.D.www.wiresharktraining.comIP scanXmas scanstealth scanhalf‐connect scan

Sample Multiple Choice Question(with image)Which statement about the Preferences setting shown above is correct?A.B.C.D.Wireshark may generate DNS PTR queries to resolve host names.Wireshark may generate port queries to ietf.org to resolve transport names.Wireshark may generate OUI queries to ieee.org to resolve MAC addresses.Wireshark may generate mDNS queries to resolve 500 host names simultaneously.www.wiresharktraining.com

Sample Multiple Choice Question(with image)Which statement about the DNS packetshown is correct?A. This is an inverse DNS query.B. This is a DNS response packet.C. This DNS packet indicates thata domain name could not beresolved.D. This is a request to resolve theIP address 2.26.64.24.www.wiresharktraining.com

Sample True/False QuestionA Window Update packet contains no data, but indicates that the sender'sTCP window size field value has decreased.TrueFalsewww.wiresharktraining.com

What if I Have Questions? Visit us online– www.wiresharktraining.com/certification Contact us– [email protected]– Phone: 1 408‐378‐7841– Fax: 1 408‐378‐7891www.wiresharktraining.com

Q&A TimeThank you for joining me todaywww.wiresharktraining.comLaura Chappell, Wireshark raining.com

www.wiresharktraining.com Wireshark Certified Network Analyst Program Laura Chappell, Wireshark Univer