nerdexam
EC-Council

112-52 · Question #1

Which technique is commonly used to enable packet sniffing on a network?

The correct answer is A. Promiscuous mode. Promiscuous mode is correct because it configures a network interface card (NIC) to capture all packets traversing the network segment - not just those addressed to that machine - which is the fundamental mechanism behind packet sniffers like Wireshark and tcpdump. The distractor

Information Gathering and Vulnerability Analysis

Question

Which technique is commonly used to enable packet sniffing on a network?

Options

  • APromiscuous mode
  • BSession timeout exploitation
  • CSQL injection
  • DDNS tunneling

How the community answered

(38 responses)
  • A
    89% (34)
  • B
    3% (1)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Promiscuous mode is correct because it configures a network interface card (NIC) to capture all packets traversing the network segment - not just those addressed to that machine - which is the fundamental mechanism behind packet sniffers like Wireshark and tcpdump.

The distractors target different attack categories entirely: Session timeout exploitation (B) abuses authentication state, SQL injection (C) manipulates database queries through unsanitized input, and DNS tunneling (D) encodes data inside DNS traffic to bypass firewalls - none of these involve intercepting raw network packets.

Memory tip: Think "promiscuous = nosy" - a promiscuous NIC "listens in" on conversations not meant for it, just like a nosy neighbor who reads everyone's mail.

Topics

#packet sniffing#promiscuous mode#network reconnaissance#packet capture

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice