A large corporate network is being subjected to repeated sniffing attacks. To increase security, the company's IT department decides to implement a combination of several security measures. They…

Using HTTP instead of HTTPS makes data, including usernames and passwords, vulnerable to sniffing, directly increasing security risk rather than enhancing it.

Implementing network scanning and monitoring tools is the most effective next step to enhance network security against persistent sniffing, as these tools can detect suspicious traffic patterns, unauthorized devices, or unusual network behavior indicative of ongoing compromises. By providing continuous visibility, monitoring helps identify the source, nature, and extent of sniffing attacks, enabling a more targeted response even when encrypted communication protocols are in use.

Enabling network identification broadcasts typically increases the attack surface by revealing information about network services and devices, making it easier for attackers to identify targets for sniffing.

Retrieving MAC addresses from the OS is a basic network inventory task and does not directly prevent, detect, or respond to sniffing attacks, especially since MAC addresses can be spoofed by attackers.