nerdexam
EC-Council

312-50V11 · Question #515

This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option tha

The correct answer is C. Promiscuous mode. Promiscuous mode configures a NIC to pass all network frames to the CPU regardless of the destination MAC address, rather than filtering only frames addressed to that interface.

Sniffing

Question

This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement.

Options

  • AMulti-cast mode
  • BWEM
  • CPromiscuous mode
  • DPort forwarding

How the community answered

(30 responses)
  • A
    3% (1)
  • C
    93% (28)
  • D
    3% (1)

Why each option

Promiscuous mode configures a NIC to pass all network frames to the CPU regardless of the destination MAC address, rather than filtering only frames addressed to that interface.

AMulti-cast mode

Multicast mode configures the NIC to accept frames sent to specific multicast group addresses, not all traffic on the segment.

BWEM

WEM (Workspace Environment Management) is a Citrix feature for managing user environments and has no relation to NIC traffic handling modes.

CPromiscuous modeCorrect

In promiscuous mode, the NIC bypasses its normal MAC address filtering and forwards every frame it detects on the network segment to the CPU. This is the standard definition used in networking and is essential for packet capture tools like Wireshark to capture traffic not destined for the host.

DPort forwarding

Port forwarding redirects traffic from one IP/port combination to another on a router or firewall and does not describe a NIC operating mode.

Concept tested: NIC promiscuous mode and packet capture

Source: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/promiscuous-mode-hyperv

Topics

#promiscuous mode#NIC configuration#packet capture#network sniffing

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice