nerdexam
GIAC

GSLC · Question #315

Which of the following is a process of monitoring data packets that travel across a network?

The correct answer is B. Packet sniffing. Packet sniffing is the process of capturing and inspecting data packets as they traverse a network, used for traffic analysis, troubleshooting, and security monitoring.

Security Architecture & Engineering

Question

Which of the following is a process of monitoring data packets that travel across a network?

Options

  • ASCP protocol
  • BPacket sniffing
  • CRootkit
  • DICMP

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    89% (47)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Packet sniffing is the process of capturing and inspecting data packets as they traverse a network, used for traffic analysis, troubleshooting, and security monitoring.

ASCP protocol

SCP (Secure Copy Protocol) is a file transfer protocol that securely copies files between hosts over SSH and is not used to monitor network traffic.

BPacket sniffingCorrect

Packet sniffing works by placing a network interface into promiscuous mode, allowing it to capture all packets passing through the network segment regardless of destination. Tools such as Wireshark and tcpdump implement this technique to monitor traffic content, detect anomalies, and diagnose network issues. This directly matches the definition of monitoring data packets traveling across a network.

CRootkit

A rootkit is a category of malicious software designed to gain persistent privileged access to a system while hiding its presence, unrelated to network packet monitoring.

DICMP

ICMP (Internet Control Message Protocol) is a network-layer protocol used for sending error messages and operational information such as ping diagnostics, not for monitoring data packets.

Concept tested: Packet sniffing network traffic monitoring process

Source: https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html

Topics

#packet sniffing#network monitoring#traffic analysis#passive attacks

Community Discussion

No community discussion yet for this question.

Full GSLC Practice