Skip to content

Wireshark Cards Practice Exam

Test yourself under real exam conditions: 50 timed questions, 60 on the clock, pass mark 70%%. Instant score with a full review of everything you got wrong. Free — no account needed.

📝 50 questions · ⏱ 60 minutes · 🎯 Pass mark 70% · 🆓 Free, no signup

Exam details

  • 50 questions drawn from 728 cards
  • Countdown timer — auto-submits when time runs out
  • Pass mark 70% (real certification threshold)
  • Full review of wrong answers at the end
  • No signup required — save your score with a free account

Sample Questions

5 shown

What is Wireshark?

Show ▼

A network protocol analyzer used for network troubleshooting, analysis, software and communications protocol development, and education.

What is the difference between a Capture Filter and a Display Filter?

Show ▼

Capture filters limit what is recorded by Wireshark - Display filters limit what is seen on the screen after capturing.

What is the syntax to filter for IP address 192.168.1.1 in a display filter?

Show ▼

ip.addr == 192.168.1.1

How do you filter for HTTP traffic?

Show ▼

http

What does "Promiscuous Mode" do?

Show ▼

It allows the network card to capture all traffic on the network segment, not just traffic addressed to the machine running Wireshark.

🎯 Take the Wireshark Cards Practice Exam