You are the Network Administrator and your company has recently implemented encryption for all emails. You want to check to make sure that the email packages are being encrypted. What tool would you…

A password cracker is used to recover authentication credentials through brute-force or dictionary attacks, and cannot capture or inspect live network packet contents.

A packet sniffer such as Wireshark intercepts and displays raw network packets in transit, allowing an administrator to examine the payload of SMTP, IMAP, or POP3 sessions and verify whether content is encrypted (ciphertext) or readable plaintext. This is the standard method for confirming that transport-layer encryption such as TLS/STARTTLS is active and functioning on email traffic.

Performance Monitor tracks operating system metrics such as CPU, memory, and disk I/O, and has no capability to capture or analyze network packet payloads.

A vulnerability analyzer scans systems and services for known security weaknesses, but does not capture live traffic to verify whether specific packets are encrypted.