Sniffing Module 07 Quiz

Which protocol is known to transmit data in clear text?

At which layer of the OSI model do sniffers operate?

What defines active wiretapping?

What is the primary function of a hardware protocol analyzer?

What does lawful interception involve?

Which of the following is a characteristic of passive wiretapping?

Which of these protocols is NOT considered compromised regarding sniffing?

What is the main purpose of wiretapping?

What technique does DNS poisoning utilize to mislead a DNS server?

Which of the following is a recommended way to defend against network sniffing?

Which method can be used to capture and analyze network traffic?

What is one way an attacker can utilize MAC addresses to perform attacks?

Which protocol should be used instead of FTP for secure file transfers?

Which of the following attacks involves manipulating the cache of a DNS server?

What type of network traffic does Wireshark capture?

How can one detect if any network interfaces are running in promiscuous mode?

What is the purpose of an ARP request?

Which of the following describes ARP poisoning?

What threat involves diverting communications between two machines through an attacker's PC?

How can a MAC duplicating attack be executed?

What is the primary function of a sniffer in a network?

Which type of sniffing involves monitoring packets without injecting any additional traffic?

What happens after ARP requests and replies flood a switch?

What happens during active sniffing in a switch-based network?

Which of the following is NOT a threat associated with ARP poisoning?

What technique can an attacker use in active sniffing to redirect traffic from the victim's machine?

What is a common method used by attackers in ARP spoofing?

What does a switch do in 'forwarding mode'?

What type of traffic can potentially be captured by sniffers?

In a hub-based network, what advantage does passive sniffing provide?

What is a possible effect of MAC flooding in a network?

What is the first step an attacker takes when using sniffers to hack a network?

What is the primary function of the PRISM tool?

Which of the following describes MAC flooding?

What is one of the key defenses against MAC flooding attacks?

What does Address Resolution Protocol (ARP) primarily do?

What data flow speed is reported for Europe in the context of wiretap rates?

Which component allows law enforcement to access intercepted data?

Which of the following is NOT part of the recommended port security configuration?

Which area has the highest data flow in hours related to wiretapping?

DNS poisoning tricks a DNS server into believing it has received authentic information.

Wireshark captures packets only on the networks supported by Ethernet.

Using a switch instead of a hub can help protect data by delivering it only to the intended recipient.

A common method for attackers to carry out a DNS attack is by creating fake DNS entries with the same name as legitimate servers.

Retrieving the MAC address directly from the OS is recommended to prevent MAC address spoofing.

Sniffing is a method used to capture and monitor data packets in a network.

Active sniffing requires the use of switches to be effective, while passive sniffing does not.

In passive sniffing, the attacker can send data packets into the network traffic.

MAC flooding is an example of an active sniffing technique.

A sniffer can be used to turn a standard NIC into promiscuous mode to listen to all transmitted data.

Sniffers operate at the Network layer of the OSI model.

Active wiretapping involves only monitoring and recording traffic.

A hardware protocol analyzer can capture and analyze individual data bytes passing through a cable.

Lawful interception requires consent from one of the involved parties.

All data sent via FTP is encrypted by default.

Passive wiretapping is considered a criminal offense in all circumstances.

IMAP is a protocol known for sending passwords in clear text.

A compromised protocol guarantees secure data transmission.

Sniffers can operate independently of the upper layers and remain undetected.

Telephone conversations can be monitored through wiretapping.

What is the primary consequence of DNS poisoning?

How does Wireshark primarily capture network traffic?

Which method is effective in preventing MAC address spoofing?

What is the purpose of using a switch instead of a hub in network configuration?

Which technique can be employed to recognize if a machine is in promiscuous mode?

What is the primary difference between passive and active sniffing in a network?

Which technique allows an attacker to redirect traffic using ARP spoofing?

What makes passive sniffing more advantageous than active sniffing?

Which kind of network equipment primarily exposes vulnerabilities to sniffing attacks?

What does MAC flooding aim to achieve in terms of network security?

Which of the following statements is true regarding active wiretapping?

What is a primary function of hardware protocol analyzers?

Which protocol is typically associated with transmitting data in clear text?

What does passive wiretapping primarily allow an attacker to do?

Which of the following could be considered a limitation of sniffers at the Data Link layer?

What distinguishes lawful interception from other types of data interception?

What is a common tool for monitoring network usage and identifying malicious traffic?

Which of the following protocols is vulnerable to sniffing due to transmitting data in clear text?

What technique is primarily used to monitor and capture telephone conversations by unauthorized parties?

Which of the following statements is true regarding sniffing tools?

DNS poisoning results in the replacement of a true IP address with a false one at the DNS level.

Wireshark can capture packets from all network types without any limitations.

Using HTTPS instead of HTTP is a recommended approach to protect sensitive data during transmission.

Creating fake DNS entries is not a technique used in DNS attacks.

Retrieving the MAC address from the operating system helps in preventing MAC address spoofing.

Active sniffing involves monitoring packets without injecting additional data into the network traffic.

Passive sniffing can capture all traffic in a hub-based network because the hub sends traffic to all ports.

A common active sniffing technique is DHCP attacks, which can lead to network disruption and data theft.

MAC flooding can cause a switch to behave like a hub, exposing data to all connected devices.

Sniffing tools can only capture unencrypted data, making them ineffective against secure communications.

Sniffers can monitor data without the upper layers of the OSI model being aware of it.

Lawful interception can be performed without a warrant in most countries.

Active wiretapping involves monitoring and altering traffic.

HTTP is a protocol that transmits data securely by encrypting it.

A hardware protocol analyzer can only be used to capture signals without altering the traffic.

Passive wiretapping allows an attacker to inject false information into the communication.

Telnet is a protocol that securely transmits sensitive data.

Wireless networks can also be susceptible to wiretapping.

A hardware protocol analyzer can identify malicious network traffic generated by hacking software.

POP3 and IMAP are examples of protocols that can be compromised due to clear text transmission.

Which of the following accurately describes a feature of Wireshark?

Which method is NOT recommended to defend against network sniffing?

What is a major characteristic of DNS cache poisoning?

How can sniffing be detected on a network?

What is the primary difference between passive sniffing and active sniffing in a network environment?

In the context of network sniffing, which technique specifically targets the Content Addressable Memory (CAM) of a switch?

Which of the following explains how an attacker can successfully extract sensitive data using sniffers?

What characteristic makes passive sniffing less detectable compared to active sniffing?

Which of the following types of sensitive information could potentially be captured through sniffing that relates to user authentication processes?

What best describes the primary capability of a hardware protocol analyzer?

Which type of wiretapping involves modifying the data being intercepted?

Which layer of the OSI model do sniffers primarily interact with when capturing data?

What is a commonly used method by attackers during passive wiretapping?

Which of the following is NOT a feature of lawful interception?

Which component is essential for any wiretapping process to be considered lawful?

Which of the following protocols is susceptible to sniffing and transmits data in clear text?

What is the consequence of employing a hardware protocol analyzer in a network?

What characterizes the process of sniffing in the context of network security?

Which hardware protocol analyzer is identified for its capability to monitor network usage?

Passive sniffing can capture all traffic on a switch-based network without injecting any packets.

DNS poisoning is a technique that tricks a DNS server into believing that it has received fraudulent information.

In active sniffing, an attacker collects traffic by flooding the switch's CAM table with address resolution packets.

Wireshark captures packets from Bluetooth and ADSL networks but not from Ethernet networks.

The primary advantage of using a hub in a network is to provide higher data security compared to switches.

Using a hub instead of a switch is recommended for secure communication since hubs deliver data only to the intended recipient.

The DNS cache poisoning technique allows an attacker to replace IP address entries for a target site with an IP address controlled by the attacker.

DNS poisoning is a passive technique that does not interfere with network traffic flow.

Sniffing allows attackers to capture sensitive information like Telnet passwords and email traffic.

Retrieving the MAC address directly from the operating system instead of the NIC prevents MAC address spoofing.

Wired equipment cannot be used to monitor network traffic due to the high speed of the data flow.

Passive wiretapping can change the content of the communications being monitored.

The Data Link layer of the OSI model operates independently and can be accessed by sniffers without affecting higher layers.

Lawful interception is a method used by law enforcement to avoid any legal consequences while intercepting data communications.

Active wiretapping involves simply monitoring the data without interacting with it.

Keysight N2X N5540A is an example of a hardware protocol analyzer used for monitoring network usage.

SMTP is known to transmit data securely without risks of sniffing.

A hardware protocol analyzer modifies data packets for better analysis of network traffic.

Telnet and FTP are protocols known to transmit data including usernames and passwords in clear text.

Wiring devices can be utilized for both active and passive wiretapping methods.