nerdexam
CompTIA

PT0-003 · Question #196

During a security assessment, a penetration tester captures plaintext login credentials on the communication between a user and an authentication system. The tester wants to use this information for…

The correct answer is B. Wireshark. Capturing plaintext credentials in network traffic is done using packet sniffing. Wireshark is the best tool for this task. Wireshark is a packet analysis tool that captures unencrypted network traffic, including plaintext

Submitted by yaw92· Mar 6, 2026Attacks and Exploits

Question

During a security assessment, a penetration tester captures plaintext login credentials on the communication between a user and an authentication system. The tester wants to use this information for further unauthorized access. Which of the following tools is the tester using?

Options

  • ABurp Suite
  • BWireshark
  • CZed Attack Proxy (ZAP)
  • DMetasploit

How the community answered

(67 responses)
  • A
    1% (1)
  • B
    93% (62)
  • C
    4% (3)
  • D
    1% (1)

Explanation

Capturing plaintext credentials in network traffic is done using packet sniffing. Wireshark is the best tool for this task. Wireshark is a packet analysis tool that captures unencrypted network traffic, including plaintext

Topics

#Packet capture#Credential sniffing#Wireshark

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice