GSLC · Question #341
Which of the following is a process of monitoring data packets that travel across a network?
The correct answer is D. Packet sniffing. Packet sniffing is the technique of capturing and analyzing data packets as they traverse a network. It is used for both legitimate network monitoring and malicious eavesdropping.
Question
Which of the following is a process of monitoring data packets that travel across a network?
Options
- AICMP
- BSCP protocol
- CRootkit
- DPacket sniffing
How the community answered
(25 responses)- A4% (1)
- C8% (2)
- D88% (22)
Why each option
Packet sniffing is the technique of capturing and analyzing data packets as they traverse a network. It is used for both legitimate network monitoring and malicious eavesdropping.
ICMP (Internet Control Message Protocol) is a network-layer protocol used for sending error messages and operational information such as ping requests, not for monitoring or capturing packets.
SCP (Secure Copy Protocol) is a file transfer protocol that uses SSH encryption to securely copy files between hosts, not a method for observing network traffic.
A rootkit is a category of malicious software designed to gain unauthorized root-level access to a system and conceal its presence, not a network monitoring process.
Packet sniffing involves using software or hardware tools to intercept and log network traffic passing through a network interface, operating at the data link layer to capture raw packets for analysis. It is fundamental to network diagnostics and security monitoring, and can also be exploited by attackers to capture unencrypted sensitive data such as credentials. This makes it the precise technical term for monitoring data packets traveling across a network.
Concept tested: Packet sniffing and network traffic monitoring
Source: https://csrc.nist.gov/glossary/term/packet_sniffer
Topics
Community Discussion
No community discussion yet for this question.