GIAC Exam GCIA Topic 2 Question 42 Discussion

Actual exam question for GIAC's GIAC Certified Intrusion Analyst exam

Question #: 42
Topic #: 2

[All GIAC Certified Intrusion Analyst Questions]

Which of the following tools is described below?

It is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of its tools include arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. It is highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof tools for switching across switched networks. It can also be used to capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.

ALIDS

BDsniff

CCain

DLibnids

Show Suggested Answer

Suggested Answer: B

by Helaine at Apr 13, 2024, 10:21 PM

Limited Time Offer

25%

Off

Get Premium GCIA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alethea

7 hours ago

Haha, yeah, imagine if the question was like, 'Which of these tools is best for intercepting your roommate's Netflix password?' *laughs* That would be a bit much, even for a security exam.

upvoted 0 times

...

Rupert

2 days ago

Dan's got a point. This is probably just a trick question to see if we're paying attention. *sighs* I guess we'd better brush up on our network security tool knowledge, even the unsavory ones. At least it's not a question about how to use Dsniff to steal passwords or something.

upvoted 0 times

...

Dan

3 days ago

Come on, you guys. This is just testing our knowledge of network security tools, both good and bad. Dsniff is a real thing, and we need to be aware of it, even if we don't ever plan to use it for anything shady. *chuckles* Besides, I bet the exam writers are just trying to trip us up. They're probably hoping we'll overthink it and choose the wrong answer.

upvoted 0 times

...

Lucy

4 days ago

I agree, Ngoc. Seeing a question about Dsniff makes me a little uneasy. That's the kind of tool that bad actors use to wreak havoc. I hope the exam isn't trying to encourage that kind of behavior.

upvoted 0 times

...

Ngoc

6 days ago

You're right, Magnolia. Dsniff is definitely the tool being described here. It's a powerful suite of tools that can really compromise the security of a network if used for malicious purposes. I'm a bit concerned that this is on the exam - it feels a little too focused on hacking tools, don't you think?

upvoted 0 times

...

Magnolia

8 days ago

Ah, this question seems to be testing our knowledge of network sniffing tools. The description sounds a lot like Dsniff to me. That tool is known for its ability to sniff passwords and other sensitive information across both switched and shared networks.

upvoted 0 times

...