A security analyst is asked to capture traffic on a network segment that uses a hub. The analyst wants to capture all traffic on the segment. Which tool and method should the analyst use?

Configure a SPAN port on the hub

Use tcpdump without promiscuous mode

Use Wireshark with promiscuous mode enabled on the analyst's NIC

Use ARP poisoning to redirect traffic to the analyst's machine

A security team wants to reduce the risk of packet sniffing on a network that carries both plaintext and encrypted traffic. Which measures are effective? (Select all that apply.)

Use port security on switches to prevent MAC flooding

Implement encryption for all sensitive traffic

Deploy a network intrusion detection system to monitor for sniffing activity

Disable promiscuous mode on all network interfaces

Use secure protocols such as SSH and HTTPS

A security analyst is testing the network's resistance to sniffing attacks. The analyst wants to simulate a passive sniffing attack on a network segment that uses a switch. Which technique should the analyst use to capture traffic without sending any packets?

Perform ARP poisoning to redirect traffic.

Connect to a port that is configured for port mirroring.

Flood the switch with MAC addresses.

In a network attack context, what does packet sniffing enable an attacker to do?

Alter the routing tables of routers to redirect traffic

Gain administrative access to a network switch

Intercept unencrypted credentials and sensitive data transmitted over the network

Launch a denial-of-service attack by flooding the network with packets

A company wants to ensure that even if an attacker captures network traffic, the data cannot be read. Which measure is most effective?

Disable promiscuous mode on all hosts

Use a network intrusion detection system

Use encryption for all sensitive traffic

EC-CouncilEthical Hacking Essentials

Domain 5Objective 1

Packet Sniffing Concepts EHE Practice Questions (Page 5)

Part of the Network-Level Attacks and Countermeasures domain, which makes up ~12% of our current practice bank.

40questions here

8free pages

5concepts

Questions 21–25

21expert · hard
A security analyst is asked to capture traffic on a network segment that uses a hub. The analyst wants to capture all traffic on the segment. Which tool and method should the analyst use?
Select an answer first
22expert · hard · select all that apply
A security team wants to reduce the risk of packet sniffing on a network that carries both plaintext and encrypted traffic. Which measures are effective? (Select all that apply.)
Select an answer first
23application · medium
A security analyst is testing the network's resistance to sniffing attacks. The analyst wants to simulate a passive sniffing attack on a network segment that uses a switch. Which technique should the analyst use to capture traffic without sending any packets?
Select an answer first
24foundation · easy
In a network attack context, what does packet sniffing enable an attacker to do?
Select an answer first
25application · medium
A company wants to ensure that even if an attacker captures network traffic, the data cannot be read. Which measure is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.