Which statement is TRUE about the operation of a packet sniffer?

Question

Options

• AIt can only have one interface on a management network.
• BThey are required for firewall operation and stateful inspection.
• CThe Ethernet card must be placed in promiscuous mode.
• DIt must be placed on a single virtual LAN interface.

• A
  2% (1)
• B
  8% (4)
• C
  88% (42)
• D
  2% (1)

Explanation

By default, a network interface card (NIC) only processes packets addressed to its own MAC address and discards the rest. For a packet sniffer to capture all traffic on the network segment - not just traffic destined for its host - the NIC must be placed in promiscuous mode, which instructs it to pass all received frames up to the OS regardless of destination address. A packet sniffer does not require a management network interface (A); it can operate on any interface. Firewalls and stateful inspection (B) do not require a packet sniffer to operate. A packet sniffer is not required to be on a single VLAN interface (D); it can monitor traffic on any interface it has access to.

No community discussion yet for this question.