nerdexam
CompTIA

PT0-002 · Question #113

During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network. Which of the following tools could be used to impersonate network…

The correct answer is C. Responder. In this scenario, the question specifically states “name resolution requests.” In this case, Responder is the best choice. Responder is a toolkit used to answer NetBIOS queries from Windows systems on a network. Tcpdump is a type of packet analyzer software utility that…

Attacks and Exploits

Question

During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network. Which of the following tools could be used to impersonate network resources and collect authentication requests?

Options

  • AEttercap
  • BTcpdump
  • CResponder
  • DMedusa

How the community answered

(30 responses)
  • A
    3% (1)
  • C
    93% (28)
  • D
    3% (1)

Explanation

In this scenario, the question specifically states “name resolution requests.” In this case, Responder is the best choice. Responder is a toolkit used to answer NetBIOS queries from Windows systems on a network. Tcpdump is a type of packet analyzer software utility that monitors and logs TCP/IP traffic passing between a network and the computer on which it is executed. Ettercap is a free and open source network security tool for man-in-the-middle attacks on LAN. Medusa is a brute-force login attack tool that supports a variety of protocols and

Topics

#Responder#Credential harvesting#Name resolution poisoning#Network attacks

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice