GIAC
GCIH · Question #581
GCIH Question #581: Real Exam Question with Answer & Explanation
The correct answer is A: Only broadcast packets and packets destined for that specific host. Switched environment does not broadcast all information to all links of the LAN segment. Instead, the switch is more intelligent than the hub, and by looking at the destination MAC address, will only send the data to the required port on the switch.
Reconnaissance, Scanning, and Enumeration
Question
If a sniffer is installed on a host residing on a switched environment network, what packets will it capture?
Options
- AOnly broadcast packets and packets destined for that specific host
- BAll packets on a network
- CNone - sniffers cannot function on a switched network
- DOnly packets destined for hosts on the same switch
Explanation
Switched environment does not broadcast all information to all links of the LAN segment. Instead, the switch is more intelligent than the hub, and by looking at the destination MAC address, will only send the data to the required port on the switch.
Topics
#network sniffing#switched network#packet capture#promiscuous mode
Community Discussion
No community discussion yet for this question.