Exam 312-38 topic 1 question 160 discussion

Actual exam question from ECCouncil's 312-38

Question #: 160
Topic #: 1

Which of the following tools is described below? It is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of its tools include arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. It is highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof tools for switching across switched networks. It can also be used to capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.

A. Dsniff
B. Cain
C. Libnids
D. LIDS

Show Suggested Answer

Suggested Answer: A 🗳️
Dsniff is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of the tools of Dsniff include dsniff, arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. Dsniff is highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof tools for switching across switched networks. It can also be used to capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.
Answer option B is incorrect. Cain is a multipurpose tool that can be used to perform many tasks such as Windows password cracking, Windows enumeration, and VoIP session sniffing. This password cracking program can perform the following types of password cracking attacks:

Dictionary attack -

Brute force attack -

Rainbow attack -

Hybrid attack -
Answer options D and C are incorrect. These tools are port scan detection tools that are used in the Linux operating system.

by designtshirt at April 4, 2025, 10:45 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!

Exam 312-38 All Questions

View all questions & answers for the 312-38 exam

Exam 312-38 topic 1 question 160 discussion

Comments

SY0-701