A network administrator wants to perform a test to see if any systems are passing clear text through the network. Which of the following would be used?

Social engineering is a human-based manipulation technique used to trick people into revealing information - it does not involve monitoring or inspecting network traffic.

Packet sniffing tools such as Wireshark place a network interface into promiscuous mode to capture all frames traversing a segment. The captured payload data can then be inspected to determine whether sensitive information such as credentials or session data is being transmitted unencrypted, making it the direct method for auditing cleartext traffic.

A rogue access point is an unauthorized AP introduced into a network, typically for attack purposes - it does not passively analyze existing traffic for cleartext.

A man-in-the-middle attack actively intercepts and potentially alters traffic between two parties - it is an attack technique, not an administrative auditing tool.