Welcome to the Wireshark certified Network Analyst Program.

My name is Laura Chappell and Im the founder of Wireshark University. Wireshark

University was founded in 2007 with a single goal in mind: educate IT professionals on
using Wireshark network analysis to solve network problems.
Please contact us at info@wiresharktraining.com or visit www.wiresharktraining.com if you
have questions regarding Wireshark University, Wireshark University Authorized Training
Partners, or the Wireshark Certified Network Analyst Program.
About Wireshark University
Founded by recognized network analyst expert Laura Chappell, Wireshark University
provides Wireshark-authorized training on network analysis, troubleshooting and
security in both self-paced and instructor-led formats. All training curriculum is
based on real-world experiences and techniques used to optimize, troubleshoot,
and secure networks. For more information on self-paced and instructor-led
courses as well as customized and onsite training, visit www.wiresharkU.com.
1 Wireshark Certified Network Analyst Program (July 2, 2012)
Wireshark popularity has skyrocketed since its former days as Ethereal.
With over 500,000 downloads per month, Wireshark has captured the network analysis
market.
Wireshark was originally released (under the name Ethereal) by Gerald Combs. After
moving to a new job and finding the commercial analyzers cost-prohibitive to his new
employer, Gerald embarked on a personal project to create an open source network
analyzer.
The name changed to Wireshark after Gerald moved to CACE Technologies (acquired by
Riverbed in 2010). The trademark for Ethereal remained with his previous employer. The
entire development trunk and development team moved to the new project and new name
in 2007.
We really dont know how many Wireshark downloads take place each month as there are
mirror sites around the world and the statistics are not accumulated.
You can view a video depicting the Wireshark development process at
vimeo.com/9329501. You will see the core developers activity and the focus moving
towards various elements over the years shown in the video.
2 Wireshark Certified Network Analyst Program (July 2, 2012)
Wireshark is the worlds most popular and widely-deployed network and packet analyzer.
The Wireshark certified network analyst program is designed to test competency in using
Wireshark to troubleshoot and secure networks and analyze TCP/IP network
communications.
The most recent version of Wireshark is available at www.wireshark.org/download.
3 Wireshark Certified Network Analyst Program (July 2, 2012)
This presentation contains five sections:
Certification Process: First we will take a look at sections of the certification process including
preparation for the Exam, taking the Exam, certification maintenance, and recertification.
Certification Maintenance: We will look closely at the certification maintenance process including
the various activities that qualify for Continuing Professional Education (CPE) credits.
Wireshark Certified Network Analyst Portal: We will also look at the WCNA Portal which is
available exclusively to Wireshark Certified Network Analysts. This portal was developed to provide
Wireshark Certified Network Analysts with ongoing training activities to obtain CPE credits for the
Wireshark Certified Network Analyst program and other industry certification programs.
Registering for the Exam: We will look at the exam registration process from creating a Test
Taker Account to purchasing access to the Exam itself.
Sample Exam Questions: We will finish up with a look at several sample Exam questions to give
you a feel for the style of questions contained on the Wireshark Certified Network Analyst Exam.
How to Contact Us: If this presentation did not answer your questions about the certification
program, you can reach us at info@wiresharktraining.com.
4 Wireshark Certified Network Analyst Program (July 2, 2012)
Notes:
5 Wireshark Certified Network Analyst Program (July 2, 2012)
Lets cover the four steps of the certification process:
Pre-Certification
Certification
Certification Maintenance
Recertification
6 Wireshark Certified Network Analyst Program (July 2, 2012)
There are several ways to prepare for the Exam. First we recommend that you review the
Wireshark Certified Network Analyst Information Pack at
www.wiresharktraining.com/certification. That document lists the thirty-three areas of
study in detail.
Wireshark University Authorized Training Partner Courses
Instructor-led courses are currently available through Global Knowledge (North America)
and SCOS (The Netherlands). Chappell University offers onsite custom courses and online
courses as well.
7 Wireshark Certified Network Analyst Program (July 2, 2012)
Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study
Guide (Second Edition)
This book covers all thirty-three areas of the Exam and provides real-world case studies of
Wireshark in action. Visit www.wiresharkbook.com to view sample pages, the Table of
Contents and Index. The Free Videos section provides complementing introduction videos.
This book is online at Amazon, Barnes and Noble and other major online book sellers.
The suggested retail price is US $99.95 (paperback) and US $69.95 (Kindle version).
8 Wireshark Certified Network Analyst Program (July 2, 2012)
Wireshark Certified Network Analyst: Official Exam Prep Guide
As a companion to the Study Guide, this book includes over 300 sample questions along
with detailed answers.
The suggested retail price is US $39.95 (paperback) and US $9.95 (Kindle version).
9 Wireshark Certified Network Analyst Program (July 2, 2012)
On-the-Job Study
If you are already a Wireshark aficionado, use your on-the-job network analysis experience
as your preparation method. Consider checking the thirty-three areas of the Exam to
ensure you have mastered all required topics.
10 Wireshark Certified Network Analyst Program (July 2, 2012)
Practice Exam
The Practice Exam consists of 100 randomly-selected questions and a time limit of 2 hours
(120 minutes). The Practice Exam feedback mechanism indicates which specific areas you
need to study further. The pass percentage is set at 70%, but the closer you come to
achieving 100%, the better your chances of passing the Exam.
Register for the Practice Exam at www.webassessor.com/pai. The cost is US $29 to take the
exam a single time.
11 Wireshark Certified Network Analyst Program (July 2, 2012)
Certification Process
The Wireshark Certified Network Analyst Exam is delivered in over 80 countries by
Kryterion, Inc. To locate a Kryterion testing center near you, visit
www.kryteriononline.com/host_locations.
About KRYTERION Testing Centers
Kryterion is a full-service test development and delivery company that provides
world-class online testing technology integrating item banking, test delivery and
real time reports; while leveraging a global network of testing centers. Kryterion is
the market leader in live Online Proctoring, which utilizes remote video monitoring
to observe test takers where they live, learn or work.
12 Wireshark Certified Network Analyst Program (July 2, 2012)
Wireshark University will send you your Welcome Kit within 15 days of successful completion of the
Exam.
The Welcome Kit includes:
Your Signed Certificate Suitable for framing, your signed certificate indicates successful
completion of the Wireshark Certified Network Analyst Exam.
Your Certification ID Number This number uniquely identifies you in the Wireshark
Certified Network Analyst database. Reference this number when you communicate with
Wireshark University about your certification status or accrued CPEs.
Your WCNA Portal Login Information The WCNA Portal is available exclusively to
Wireshark Certified Network Analysts. We will cover the WCNA Portal later in this
presentation.
Logo Access and Usage Details The Wireshark Certified Network Analyst logo is available
to use as long as your Certification is maintained in good standing.
CPE Requirement Details Your Welcome Kit also includes information regarding CPE
requirements and options for achieving yearly CPE credit requirements.
13 Wireshark Certified Network Analyst Program (July 2, 2012)
Certification Maintenance
Twenty CPE credits are required each year of the 3 year certification.
CPE credits must be acquired in the areas of:
Wireshark Functionality
Network Communications
Network Troubleshooting
Network Security
The WCNA Portal is free to Wireshark Certified Network Analysts and contains ongoing and
advanced online training to meet the 20 CPE yearly requirement. We cover the WCNA
Portal later in this presentation.
There are no annual maintenance fees associated with the Wireshark Certified Network
Analyst Exam at this time.
14 Wireshark Certified Network Analyst Program (July 2, 2012)
The Wireshark Certified Network Analyst designation expires after three years. All Analysts
interested in retaining their certification must recertify by taking the current version of the
Exam.
15 Wireshark Certified Network Analyst Program (July 2, 2012)
Our goal is to build a global team of Wireshark Certified Network Analysts capable of
tackling the biggest network challenges.
A solid foundation in network analysis will benefit you whether you are interested in
application performance, infrastructure device configuration and behavior, communications
optimization, capacity planning or network forensics.
16 Wireshark Certified Network Analyst Program (July 2, 2012)
Notes:
17 Wireshark Certified Network Analyst Program (July 2, 2012)
As mentioned earlier, a minimum of 20 CPE credits must be achieved each year of your
certification.
CPE credits must be achieved through study related to:
Wireshark functionality
Network communications
Network troubleshooting
Network security
18 Wireshark Certified Network Analyst Program (July 2, 2012)
One hour of activity can achieve 1 CPE credit. There are numerous ways to achieve CPE
credits.
Read/Write
Read any technical books or articles related to the four CPE areas listed previously. You can
even read RFCs or manufacturer specifications and performance details and obtain CPE
credits.
Listen/Watch
There are numerous podcasts, webinars and online training events that revolve around
network performance and security. Subscribe to weekly podcasts to quickly gain your 20
CPE credits.
Attend
Consider submitting your conference, seminar and member meeting attendance for your
required CPE credits.
Work
Direct on-the-job tasks cannot be used to achieve CPE credits. You can, however, write and
submit case studies or network analysis reports based on your on-the-job experiences.
19 Wireshark Certified Network Analyst Program (July 2, 2012)
Submit your CPE activities for credit at www.wiresharktraining.com/cpe.
You must provide your Certification ID number along with activity details (such as date of
activity, length of activity and activity details).
Note: CPEs gained through the Wireshark Analyst Portal are automatically credited to your
certification account.
20 Wireshark Certified Network Analyst Program (July 2, 2012)
Notes:
21 Wireshark Certified Network Analyst Program (July 2, 2012)
One of the requirements, obtaining 20 CPEs each year, might appear difficult to achieve.
This is the reason we created the WCNA Portal for Wireshark Certified Network Analysts.
22 Wireshark Certified Network Analyst Program (July 2, 2012)
The WCNA Portal contains activities worth over 20 CPE credits such as online courses
focused on Wireshark enhancements and network analysis techniques.
If you want to use your on-the-job experience to obtain CPE credits, consider submitting a
Case Study for inclusion in the WCNA Portal.
WCNA Portal activities do not need to be reported for CPE credits. We automatically pull
your activity information and update your CPE account.
23 Wireshark Certified Network Analyst Program (July 2, 2012)
This is an example of the WCNA Portal. The portal is constantly changing we will email
you when new content is available.
You can manage and update your Student Profile account directly in the WCNA Portal.
To submit ideas or documents for consideration, send them to
portal@wiresharktraining.com.
24 Wireshark Certified Network Analyst Program (July 2, 2012)
You can track your own progress in the WCNA Portal. Click Transcript to download and print
a copy of your activities.
These activities may be accepted by other certification programs that require yearly CPE
credits (such as the CISSP program).
25 Wireshark Certified Network Analyst Program (July 2, 2012)
Activities included on the WCNA Portal may fit into several of the CISSP activities that
achieve CPE credits as noted in this slide.
Ultimately it is the decision of the other certification party as to whether they will accept
Wireshark WCNA Portal activities for CPE credits.
26 Wireshark Certified Network Analyst Program (July 2, 2012)
Notes:
27 Wireshark Certified Network Analyst Program (July 2, 2012)
Visit www.webassessor.com/pai to register for a Test Taker account. (Protocol Analysis
Institute (PAI) is the parent company of Wireshark University.)
For instructions on registering for the Wireshark Certified Network Analyst Exam, download
the Step-by-Step Registration Guide from www.wiresharktraining.com/certification.
28 Wireshark Certified Network Analyst Program (July 2, 2012)
The Wireshark Certified Network Analyst Exam (Testing Center Proctored or Online
Proctored version) retails for USD 299.
The Practice Exam is USD 29.
When you select Buy Now to take the Exam, you will be directed to a list of testing centers
and available Exam times.
Cancellation/Rescheduling Details
If you need to reschedule your Exam appointment, you may do so earlier than 72
hours of your Exam appointment. Log into your KRYTERION account at
www.webassessor.com/pai and click on View Schedule Details and the Reschedule
button. IMPORTANT: Read the next section regarding cancellation and rescheduling
within 72 hours of your Exam appointment.
Cancellation/Rescheduling within 72 Hours of Your Exam Appointment
If you wish to cancel or reschedule your Exam within 72 hours of your
appointment, please call the PAI Customer Support line at +1 408-378-7841. Do not
attempt to contact Kryterion or the testing center directly. You will be charged a
$175 seating fee if you reschedule or cancel your Exam appointment within 72 hours
of your Exam appointment or do not show for your Exam appointment.
29 Wireshark Certified Network Analyst Program (July 2, 2012)
Notes:
30 Wireshark Certified Network Analyst Program (July 2, 2012)
Pass/Fail Grading
The Wireshark Certified Network Analyst Exam is graded on a pass/fail basis.
Passing scores are set by using statistical analysis. At the completion of the Exam,
Candidates receive a report with a breakout by Exam section.
31 Wireshark Certified Network Analyst Program (July 2, 2012)
Questions on the Exam are based on thirty-three specific sections of concentration. These
sections are thoroughly detailed in the Certification Info Pack available at
www.wiresharktraining.com/certification.
32 Wireshark Certified Network Analyst Program (July 2, 2012)
All multiple choice questions have a single correct answer. You can mark questions for
review and change your answers before submitting your Exam for grading.
B is the correct answer to the question shown.
33 Wireshark Certified Network Analyst Program (July 2, 2012)
Many questions are based on an image and may require interpretation of network packets.
A is the correct answer to the question shown.
34 Wireshark Certified Network Analyst Program (July 2, 2012)
This question requires that you inspect a single packet to determine the correct answer.
A is the correct answer to the question shown.
35 Wireshark Certified Network Analyst Program (July 2, 2012)
This is a sample True/False question.
The testing engine will alert you to any unanswered questions. It is recommended that you
answer all questions unanswered questions are graded as incorrect.
False is the correct answer to the question shown.
36 Wireshark Certified Network Analyst Program (July 2, 2012)
Thank you for your time.
Please contact us at info@wiresharktraining.com or visit www.wiresharktraining.comif you
have further questions regarding Wireshark University, Wireshark University Authorized
Training Partners, or the Wireshark Certified Network Analyst Program.
37 Wireshark Certified Network Analyst Program (July 2, 2012)