GIAC Exam GCIA Topic 2 Question 42 Discussion

Actual exam question for GIAC's GCIA exam

Question #: 42
Topic #: 2

Which of the following tools is described below?

It is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of its tools include arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. It is highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof tools for switching across switched networks. It can also be used to capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.

ALIDS

BDsniff

CCain

DLibnids

Show Suggested Answer

Suggested Answer: B

by Helaine at Apr 13, 2024, 10:21 PM

Limited Time Offer

25%

Off

Get Premium GCIA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Roy

6 months ago

I remember studying about Dsniff's capabilities to sniff passwords and email traffic. So, I go with B) Dsniff.

upvoted 0 times

...

Carissa

6 months ago

Dsniff makes sense because it specifically mentions tools like arpredirect and macof.

upvoted 0 times

...

Selma

6 months ago

I'm not sure, but I think C) Cain could also be a possible answer.

upvoted 0 times

...

Pearly

6 months ago

I agree with Carissa, Dsniff matches the description.

upvoted 0 times

...

Carissa

6 months ago

I think the answer is B) Dsniff.

upvoted 0 times

...

Alease

6 months ago

Yes, Dsniff is the most suitable choice based on the description given.

upvoted 0 times

...

Andree

7 months ago

So, Dsniff is the right answer for this question then?

upvoted 0 times

...

Afton

7 months ago

I agree with User 2. Dsniff is known for sniffing passwords and network traffic effectively.

upvoted 0 times

...

Alease

7 months ago

I think it's Dsniff. It has tools like arpredirect and macof for sniffing networks.

upvoted 0 times

...

Andree

7 months ago

I'm not sure what tool they are describing. Any ideas?

upvoted 0 times

...

Alethea

8 months ago

Haha, yeah, imagine if the question was like, 'Which of these tools is best for intercepting your roommate's Netflix password?' *laughs* That would be a bit much, even for a security exam.

upvoted 0 times

...

Rupert

8 months ago

Dan's got a point. This is probably just a trick question to see if we're paying attention. *sighs* I guess we'd better brush up on our network security tool knowledge, even the unsavory ones. At least it's not a question about how to use Dsniff to steal passwords or something.

upvoted 0 times

...

Dan

8 months ago

Come on, you guys. This is just testing our knowledge of network security tools, both good and bad. Dsniff is a real thing, and we need to be aware of it, even if we don't ever plan to use it for anything shady. *chuckles* Besides, I bet the exam writers are just trying to trip us up. They're probably hoping we'll overthink it and choose the wrong answer.

upvoted 0 times

...

Lucy

8 months ago

I agree, Ngoc. Seeing a question about Dsniff makes me a little uneasy. That's the kind of tool that bad actors use to wreak havoc. I hope the exam isn't trying to encourage that kind of behavior.

upvoted 0 times

...

Ngoc

8 months ago

You're right, Magnolia. Dsniff is definitely the tool being described here. It's a powerful suite of tools that can really compromise the security of a network if used for malicious purposes. I'm a bit concerned that this is on the exam - it feels a little too focused on hacking tools, don't you think?

upvoted 0 times

...

Magnolia

8 months ago

Ah, this question seems to be testing our knowledge of network sniffing tools. The description sounds a lot like Dsniff to me. That tool is known for its ability to sniff passwords and other sensitive information across both switched and shared networks.

upvoted 0 times

Georgene

7 months ago

Yes, I agree. Dsniff is known for sniffing passwords and HTTP traffic.

upvoted 0 times

...

Georgene

7 months ago

I think the tool described is Dsniff.

upvoted 0 times

...