Which of the following is the BEST way to defend against network sniffing?

Question

Options

• AUsing encryption protocols to secure network communications
• BRegister all machines MAC Address in a Centralized Database
• CUse Static IP Address
• DRestrict Physical Access to Server Rooms hosting Critical Servers

• A
  85% (40)
• B
  4% (2)
• C
  2% (1)
• D
  9% (4)

Explanation

Network Sniffing Defense Explained

Encryption (Option A) is the best defense because even if an attacker captures network traffic through sniffing, encrypted data (using protocols like TLS/HTTPS, SSH, or VPNs) is unreadable without the decryption key - rendering the intercepted data useless.

Why the distractors fail:

• Option B (MAC Address Database) helps with network management and can aid in detecting rogue devices, but does nothing to protect data that is actively being transmitted and captured
• Option C (Static IP Addresses) improves network stability and simplifies management, but IP addresses are irrelevant to whether a sniffer can read your packet contents
• Option D (Physical Access Restriction) is a good security practice for preventing unauthorized physical access, but network sniffing can occur remotely over wireless or compromised network segments, making physical controls insufficient on their own

Memory Tip: Think of encryption as a locked envelope - even if someone steals your mail (sniffs your traffic), they still can't read the letter inside. Sniffing captures data, so only protecting the data itself with encryption directly counters the threat.

No community discussion yet for this question.