SSCP · Question #1016
What is a packet sniffer?
The correct answer is D. It captures network traffic for later analysis.. A packet sniffer, also known as a network analyzer or protocol analyzer, is a tool that intercepts and logs network traffic for detailed inspection and analysis.
Question
What is a packet sniffer?
Options
- AIt tracks network connections to off-site locations.
- BIt monitors network traffic for illegal packets.
- CIt scans network segments for cabling faults.
- DIt captures network traffic for later analysis.
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- D92% (36)
Why each option
A packet sniffer, also known as a network analyzer or protocol analyzer, is a tool that intercepts and logs network traffic for detailed inspection and analysis.
While a packet sniffer can show connections to off-site locations, its primary function is broader: to capture and inspect all traffic it sees, not just off-site connections.
Monitoring for 'illegal packets' is a function of an Intrusion Detection/Prevention System (IDS/IPS), which analyzes traffic against rules, rather than just capturing it.
Scanning network segments for cabling faults is typically done with cable testers or network diagnostic tools, not a packet sniffer.
A packet sniffer operates by capturing data packets that traverse a network segment, allowing an administrator or attacker to examine the contents of these packets for troubleshooting, security analysis, or data exfiltration. The captured data can then be analyzed to understand network behavior, identify issues, or detect malicious activity.
Concept tested: Packet sniffer function
Source: https://www.cisco.com/c/en/us/products/security/what-is-packet-sniffing.html
Topics
Community Discussion
No community discussion yet for this question.