nerdexam
EC-Council

312-50V10 · Question #295

Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

The correct answer is A. Cain. Cain & Abel is a multi-purpose security tool that includes a VoIP sniffer capable of capturing SIP/RTP traffic and reconstructing voice conversations from packet captures.

Sniffing

Question

Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

Options

  • ACain
  • BJohn the Ripper
  • CNikto
  • DHping

How the community answered

(23 responses)
  • A
    96% (22)
  • B
    4% (1)

Why each option

Cain & Abel is a multi-purpose security tool that includes a VoIP sniffer capable of capturing SIP/RTP traffic and reconstructing voice conversations from packet captures.

ACainCorrect

Cain & Abel includes a dedicated VoIP sniffer module that captures RTP streams and SIP signaling from live traffic or packet capture files, then reconstructs and plays back the actual audio conversations. This functionality makes it the appropriate tool when a pentester needs to extract intelligible voice data from captured VoIP sessions. No other option in this list has any VoIP decoding capability.

BJohn the Ripper

John the Ripper is a password hash cracking tool with no packet capture or VoIP decoding functionality.

CNikto

Nikto is a web server vulnerability scanner focused on HTTP/HTTPS misconfigurations and has no ability to process or decode VoIP traffic.

DHping

Hping is a packet crafting and firewall testing tool used for sending custom TCP/IP packets, not for capturing or decoding voice conversations.

Concept tested: VoIP traffic interception and reconstruction using Cain

Topics

#VoIP sniffing#packet capture#Cain#traffic analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice