nerdexam
GIAC

GSLC · Question #341

Which of the following is a process of monitoring data packets that travel across a network?

The correct answer is D. Packet sniffing. Packet sniffing is the technique of capturing and analyzing data packets as they traverse a network. It is used for both legitimate network monitoring and malicious eavesdropping.

Security Operations & Incident Response Leadership

Question

Which of the following is a process of monitoring data packets that travel across a network?

Options

  • AICMP
  • BSCP protocol
  • CRootkit
  • DPacket sniffing

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    8% (2)
  • D
    88% (22)

Why each option

Packet sniffing is the technique of capturing and analyzing data packets as they traverse a network. It is used for both legitimate network monitoring and malicious eavesdropping.

AICMP

ICMP (Internet Control Message Protocol) is a network-layer protocol used for sending error messages and operational information such as ping requests, not for monitoring or capturing packets.

BSCP protocol

SCP (Secure Copy Protocol) is a file transfer protocol that uses SSH encryption to securely copy files between hosts, not a method for observing network traffic.

CRootkit

A rootkit is a category of malicious software designed to gain unauthorized root-level access to a system and conceal its presence, not a network monitoring process.

DPacket sniffingCorrect

Packet sniffing involves using software or hardware tools to intercept and log network traffic passing through a network interface, operating at the data link layer to capture raw packets for analysis. It is fundamental to network diagnostics and security monitoring, and can also be exploited by attackers to capture unencrypted sensitive data such as credentials. This makes it the precise technical term for monitoring data packets traveling across a network.

Concept tested: Packet sniffing and network traffic monitoring

Source: https://csrc.nist.gov/glossary/term/packet_sniffer

Topics

#packet sniffing#network monitoring#traffic analysis#network security

Community Discussion

No community discussion yet for this question.

Full GSLC Practice