Exam CAS-004 topic 1 question 442 discussion

Actual exam question from CompTIA's CAS-004

Question #: 442
Topic #: 1

An internal security audit determines that Telnet is currently being used within the environment to manage network switches. Which of the following tools should be utilized to identify credentials in plaintext that are used to log in to these devices?

A. Fuzzer
B. Network traffic analyzer
C. HTTP interceptor
D. Port scanner
E. Password cracker

Show Suggested Answer

Suggested Answer: B 🗳️

by 23169fd at July 16, 2024, 3:05 p.m.

Comments

Submit Cancel

Djonzi

2 months, 2 weeks ago

Selected Answer: B

The correct answer is B. Network traffic analyzer.

upvoted 1 times

...

Steel16

3 months, 3 weeks ago

Selected Answer: B

o Network traffic analyzer captures and analyzes network traffic. When Telnet connections are made, the credentials (username and password) are typically sent in plain text within the packets. By capturing and analyzing this traffic, a network traffic analyzer can reveal the plaintext credentials used for Telnet authentication.

upvoted 1 times

...

23169fd

11 months, 2 weeks ago

Selected Answer: B

B. Network traffic analyzer: A network traffic analyzer (also known as a packet sniffer or protocol analyzer) captures and inspects the data packets traveling over the network. Since Telnet transmits data, including credentials, in plaintext, a network traffic analyzer can be used to capture the packets containing the login credentials as they are sent over the network. Tools like Wireshark are commonly used for this purpose and can help identify and analyze the plaintext credentials.

upvoted 2 times

...